Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:qcalagent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductQcalagent (bcf7aff4-9178-5c93-af7a-2efeb1b620b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41289 vulnerable 2026-06-03 14:52:51.556626 QcalAgent
MEDIUM (6.3)
An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QcalAgent 1.1.8 and later
Published: 2024-01-05T16:19:05.701Z
Updated: 2025-06-17T20:29:12.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38678 vulnerable 2026-06-03 14:45:07.872426 Open Redirect Vulnerability in QcalAgent
MEDIUM (6.1)
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later
Published: 2022-01-14T01:00:17.962Z
Updated: 2024-09-17T03:59:41.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38677 vulnerable 2026-06-03 14:45:07.870654 Reflected XSS Vulnerability in QcalAgent
MEDIUM (5.3)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later
Published: 2022-01-14T01:00:16.519Z
Updated: 2024-09-17T01:10:31.762Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.