VDB

CVE-2024-32762

CVE-2024-32762 PUBLISHED CVSS 8.199999809265137 HIGH

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later

EPSS 0.82% · 74.8th percentile

Risk Scores

CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H
EPSS Score
0.82%
74.8th percentile

Affected Products

VendorProductVersions
QNAP Systems Inc.QuLog Center1.8.x.x, 1.7.x.x
qnapqulog_center1.7.0, 1.8.0

Exploit Intelligence

Timeline

  • Sep 6, 2024 CVE Published
  • Sep 6, 2024 PoC Published
  • Sep 7, 2024 EPSS Score
  • Sep 27, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 17, 2024 EPSS Score
  • Nov 6, 2024 EPSS Score
  • Nov 24, 2024 Coalition ESS Score
  • Nov 26, 2024 EPSS Score
  • Dec 17, 2024 EPSS Score
  • Jan 6, 2025 EPSS Score
  • Jan 26, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›