Approved changes feed: RSS · Atom

cpe:2.3:a:synology:safeaccess:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductSafeaccess (5d50690e-e9d9-5428-ba31-1367f843a6a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27660 vulnerable 2026-06-08 05:23:52.919898 Details available
CRITICAL (9.6)
SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter.
Published: 2020-11-30T09:30:15.887Z
Updated: 2024-09-17T04:25:26.833Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27659 vulnerable 2026-06-08 05:23:52.919430 Details available
HIGH (8.4)
Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter.
Published: 2020-11-30T09:30:15.481Z
Updated: 2024-09-17T04:00:17.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.