GCVE - cpe:2.3:a:synology:safe_access:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:synology:safe_access:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Synology (`65464e9b-7339-559d-9719-837f074e0220`)
Product	Safe Access (`8235d685-4395-5165-94de-a215bc5cbc67`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-10466`	vulnerable	2026-06-08 07:02:26.918572	Details available MEDIUM (5.9) Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information or conduct limited denial-of-service in SRM. Published: 2026-05-27T08:32:02.342Z Updated: 2026-05-27T13:44:57.358Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_25_11	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27660`	vulnerable	2026-06-08 05:23:52.919857	Details available CRITICAL (9.6) SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter. Published: 2020-11-30T09:30:15.887Z Updated: 2024-09-17T04:25:26.833Z Open on db.gcve.eu Reference links https://www.synology.com/security/advisory/Synology_SA_20_25 https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1087 https://github.com/thomasfady/Synology_SA_20_25	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27659`	vulnerable	2026-06-08 05:23:52.918852	Details available HIGH (8.4) Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter. Published: 2020-11-30T09:30:15.481Z Updated: 2024-09-17T04:00:17.636Z Open on db.gcve.eu Reference links https://www.synology.com/security/advisory/Synology_SA_20_25 https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1087 https://github.com/thomasfady/Synology_SA_20_25	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.