Approved changes feed: RSS · Atom

cpe:2.3:o:synology:diskstation_manager:7.0:*:*:*:*:*:*:*

part: o version: 7.0 update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductDiskstation Manager (db429775-8112-5c04-a3e0-3177c21cf9b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27621 not_vulnerable 2026-06-03 14:46:53.083114 Details available
MEDIUM (5.5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors.
Published: 2022-08-03T05:55:11.765Z
Updated: 2024-09-17T01:50:43.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27620 not_vulnerable 2026-06-03 14:46:47.604448 Details available
MEDIUM (6.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.
Published: 2022-08-03T02:55:10.286Z
Updated: 2024-09-16T22:45:35.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27618 not_vulnerable 2026-06-03 14:46:47.600256 Details available
MEDIUM (6.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors.
Published: 2022-08-03T02:20:13.652Z
Updated: 2024-09-16T17:03:10.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.