CVE-2018-13294mediumCWE-200

CVE-2018-13294: medium-severity vulnerability in Synology Application Service

Published · Updated

Follow this CVE+ Monitor Application Service

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 1.3%
Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Synology · Application Service
Related CVEs — Synology Application Service

In the same product, most dangerous first.

CVE-2018-13295MEDIUMCVE-2018-13295EPSS 1.3%