CVE-2020-2493CWE-79CWE-80

CVE-2020-2493: vulnerability in QNAP Systems Inc. Multimedia Console

Cross-site Scripting Vulnerability in Multimedia Console

Published · Updated

Follow this CVE+ Monitor Multimedia Console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.
Affected products
QNAP Systems Inc. · Multimedia Console
Related CVEs — QNAP Systems Inc. Multimedia Console

In the same product, most dangerous first.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2021-38684HIGHBuffer Overflow Vulnerability in Multimedia ConsoleEPSS 1.3%CVE-2023-23364HIGHMultimedia ConsoleEPSS 0.9%