Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:qes:2.1.1:build_20200811:*:*:*:*:*:*

part: a version: 2.1.1 update: build_20200811

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQes (cc1471e8-3583-5a35-bc66-48d94096c399)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2505 vulnerable 2026-06-08 05:24:59.336936 Sensitive information via generation of error messages vulnerability in QES
LOW (2.3)
If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
Published: 2020-12-24T01:39:48.218Z
Updated: 2024-09-16T21:07:28.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2504 vulnerable 2026-06-08 05:24:59.336293 Absolute path traversal vulnerability in QES
MEDIUM (5.8)
If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
Published: 2020-12-24T01:39:28.422Z
Updated: 2024-09-17T00:25:31.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2503 vulnerable 2026-06-08 05:24:59.335329 Stored cross-site scripting vulnerability in QES
CRITICAL (9)
If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
Published: 2020-12-24T01:39:08.389Z
Updated: 2024-09-17T03:07:20.826Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.