Approved changes feed: RSS · Atom

cpe:2.3:a:synology:sso_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductSso Server (72f7fcac-a1da-5cd6-9981-677387e95590)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27620 vulnerable 2026-06-08 05:42:42.495508 Details available
MEDIUM (6.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.
Published: 2022-08-03T02:55:10.286Z
Updated: 2024-09-16T22:45:35.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16775 vulnerable 2026-06-08 05:09:01.049711 Details available
HIGH (7.1)
Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Published: 2019-04-01T14:25:15.494Z
Updated: 2024-09-17T02:11:38.210Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.