What is CVE-2019-7184?

CVE-2019-7184 is a medium-severity vulnerability in QNAP Qts, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2019-12-05.

How severe is CVE-2019-7184?

Medium severity. CVSS v3 base score is 4.8 out of 10.

XSS in QNAP Qts

CVE-2019-7184

This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.015 (70.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.

Affected products

Qnap Qts — versions 4.4.1
Qnap Video_station
N/a Qnap Nas Devices Running Video Station — versions QTS 4.4.1: Video Station before version 5.4.3, QTS 4.3.4 - QTS 4.4.0: Video Station before version 5.3.10

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@qnapsecurity.com.tw (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-7184?: CVE-2019-7184 is a medium-severity vulnerability in QNAP Qts, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2019-12-05.
How severe is CVE-2019-7184?: Medium severity. CVSS v3 base score is 4.8 out of 10.