Approved changes feed: RSS · Atom

cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*

part: a version: 6.2 update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductDiskstation Manager (db429775-8112-5c04-a3e0-3177c21cf9b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27621 not_vulnerable 2026-06-08 05:42:42.503206 Details available
MEDIUM (5.5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors.
Published: 2022-08-03T05:55:11.765Z
Updated: 2024-09-17T01:50:43.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27620 not_vulnerable 2026-06-08 05:42:42.495563 Details available
MEDIUM (6.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.
Published: 2022-08-03T02:55:10.286Z
Updated: 2024-09-16T22:45:35.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27618 not_vulnerable 2026-06-08 05:42:42.489804 Details available
MEDIUM (6.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors.
Published: 2022-08-03T02:20:13.652Z
Updated: 2024-09-16T17:03:10.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27617 not_vulnerable 2026-06-08 05:42:42.486420 Details available
MEDIUM (5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to download arbitrary files via unspecified vectors.
Published: 2022-08-03T02:15:14.592Z
Updated: 2024-09-16T22:55:31.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27614 not_vulnerable 2026-06-08 05:42:42.479483 Details available
MEDIUM (5.3)
Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors.
Published: 2022-07-28T06:55:12.139Z
Updated: 2024-09-17T03:48:14.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22683 not_vulnerable 2026-06-08 05:40:54.892110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3156 vulnerable 2026-06-08 05:33:50.919966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9518 vulnerable 2026-06-08 05:14:25.671372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9517 vulnerable 2026-06-08 05:14:25.661189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9516 vulnerable 2026-06-08 05:14:25.650333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9515 vulnerable 2026-06-08 05:14:25.647531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9514 vulnerable 2026-06-08 05:14:25.629308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9513 vulnerable 2026-06-08 05:14:25.626598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9511 vulnerable 2026-06-08 05:14:25.605372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3870 vulnerable 2026-06-08 05:13:56.248205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19344 vulnerable 2026-06-08 05:13:22.181337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14907 vulnerable 2026-06-08 05:12:56.409515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.