VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Dec 24, 2020· Updated Jun 17, 2026

CVE-2020-2503

CVE-2020-2503

Description

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Qnap/QES8 versions
    cpe:2.3:a:qnap:qes:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:qnap:qes:*:*:*:*:*:*:*:*range: <2.1.1
    • cpe:2.3:a:qnap:qes:2.1.1:-:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200211:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200303:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200319:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200424:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200515:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200811:*:*:*:*:*:*
  • Qnap/File Stationllm-fuzzy
    Range: >= QES 2.1.1 Build 20201006
  • QNAP Systems Inc./QESv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.