GCVE - cpe:2.3:o:qnap:qts:4.4.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:4.4.1:*:*:*:*:*:*:*

part: o version: 4.4.1 update: *

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Qts (`9004baf2-b431-53ba-b074-38fcdcfcd981`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-7197`	vulnerable	2026-06-08 05:14:14.065720	Details available A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version. Published: 2019-12-04T16:45:00.000Z Updated: 2024-08-04T20:38:33.491Z Open on db.gcve.eu Reference links https://www.qnap.com/zh-tw/security-advisory/nas-201911-26	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7195`	not_vulnerable	2026-06-08 05:14:14.061622	Details available This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions. Published: 2019-12-05T16:34:38.000Z Updated: 2025-10-21T23:35:56.749Z Open on db.gcve.eu Reference links https://www.qnap.com/zh-tw/security-advisory/nas-201911-25 http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7194`	not_vulnerable	2026-06-08 05:14:14.060917	Details available This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions. Published: 2019-12-05T16:30:53.000Z Updated: 2025-10-21T23:35:56.883Z Open on db.gcve.eu Reference links https://www.qnap.com/zh-tw/security-advisory/nas-201911-25 http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7192`	not_vulnerable	2026-06-08 05:14:14.051704	Details available This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions. Published: 2019-12-05T16:17:29.000Z Updated: 2025-10-21T23:35:57.175Z Open on db.gcve.eu Reference links https://www.qnap.com/zh-tw/security-advisory/nas-201911-25 http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7185`	not_vulnerable	2026-06-08 05:14:14.049052	Details available This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions. Published: 2019-12-05T16:48:20.000Z Updated: 2024-08-04T20:38:33.501Z Open on db.gcve.eu Reference links https://www.qnap.com/zh-tw/security-advisory/nas-201911-27	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7184`	not_vulnerable	2026-06-08 05:14:14.046418	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0729`	not_vulnerable	2026-06-08 05:10:24.580226	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.