Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:proxy_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductProxy Server (848358f8-f898-5bbf-8582-b7516022e4b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34361 vulnerable 2026-06-03 14:44:44.757636 Reflected XSS Vulnerability in Proxy Server
MEDIUM (5.3)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-02-25T06:10:12.550Z
Updated: 2024-09-16T17:49:13.144Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34360 vulnerable 2026-06-03 14:44:44.754887 CSRF Bypass in Proxy Server
MEDIUM (5.3)
A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later QuTS hero h5.0.0: Proxy Server 1.4.3 ( 2022/01/18 ) and later QuTScloud c4.5.6: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-05-26T07:20:10.040Z
Updated: 2024-09-16T19:56:08.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34359 vulnerable 2026-06-03 14:44:44.753764 Stored XSS Vulnerability in Proxy Server
MEDIUM (6.9)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-02-25T06:10:10.788Z
Updated: 2024-09-17T01:12:01.133Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.