VendorsQNAPnas_proxy_serverany version
Vulnerabilities

QNAP NAS Proxy Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2017-7637
QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.
Published 2018-06-05 · Modified
10.0EPSS 0.031
CVE-2017-7635
QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
Published 2018-06-05 · Modified
8.8EPSS 0.006
CVE-2021-34360
CSRF Bypass in Proxy Server
Published 2022-05-26 · Modified
8.8EPSS 0.005
CVE-2021-34359
Stored XSS Vulnerability in Proxy Server
Published 2022-02-25 · Modified
6.9EPSS 0.006
CVE-2017-7636
Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or HTML.
Published 2018-06-05 · Modified
6.1EPSS 0.012
CVE-2021-34361
Reflected XSS Vulnerability in Proxy Server
Published 2022-02-25 · Modified
6.1EPSS 0.007
CVE-2017-7639
QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.
Published 2018-06-05 · Modified
5.3EPSS 0.011