Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:5.1.5.2645:-:*:*:*:*:*:*

part: o version: 5.1.5.2645 update: -

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50359 vulnerable 2026-06-08 06:16:16.017477 QTS, QuTS hero
LOW (3.4)
An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later
Published: 2024-02-02T16:06:16.972Z
Updated: 2024-08-02T22:16:46.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50358 vulnerable 2026-06-08 06:16:16.007400 QTS, QuTS hero, QuTScloud
MEDIUM (5.8)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QTS 4.3.6.2665 build 20240131 and later QTS 4.3.4.2675 build 20240131 and later QTS 4.3.3.2644 build 20240131 and later QTS 4.2.6 build 20240131 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-13T02:45:22.351Z
Updated: 2025-05-09T18:16:31.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47568 vulnerable 2026-06-08 06:14:25.059628 QTS, QuTS hero, QuTScloud
HIGH (8.8)
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:06:10.742Z
Updated: 2024-08-27T16:38:49.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47567 vulnerable 2026-06-08 06:14:25.038162 QTS, QuTS hero, QuTScloud
MEDIUM (4.7)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:06:05.095Z
Updated: 2024-11-07T21:13:10.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47566 vulnerable 2026-06-08 06:14:25.018694 QTS, QuTS hero, QuTScloud
MEDIUM (6.7)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:05:59.833Z
Updated: 2025-06-16T19:36:40.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47218 vulnerable 2026-06-08 06:14:24.464565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45028 vulnerable 2026-06-08 06:12:41.689397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45027 vulnerable 2026-06-08 06:12:41.687563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45026 vulnerable 2026-06-08 06:12:41.683495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41282 vulnerable 2026-06-08 06:11:05.814441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.