1. Home
  2. CVE Database
  3. CVE-2020-2503
CRITICAL · 9.0

CVE-2020-2503

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and ...

Vulnerability Description

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

CVSS Score

9.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QnapQes< 2.1.1

Related Weaknesses (CWE)

CWE-79CWE-749CWE-80

References

FAQ

What is CVE-2020-2503?

CVE-2020-2503 is a vulnerability with a CVSS score of 9.0 (CRITICAL). If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and ...

How severe is CVE-2020-2503?

CVE-2020-2503 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-2503?

Check the references section above for vendor advisories and patch information. Affected products include: Qnap Qes.