QNAP Systems Inc. QuTScloud
66 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-59382 | | QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) | LOW 1.2 | 0.4 % | ||
| CVE-2022-27600 | c5.x.x – < c5.0.1.2374 | QTS, QuTS hero, QuTScloud | HIGH 7.5 | 0.6 % | ||
| CVE-2023-34974 | | QTS, QuTS hero, QuTScloud, QVR, QES | HIGH 8.8 | 1.0 % | ||
| CVE-2024-32771 | | QTS, QuTS hero | LOW 2.6 | 0.2 % | ||
| CVE-2023-39298 | | QTS, QuTS hero | HIGH 7.8 | 0.1 % | ||
| CVE-2023-39300 | | QTS | HIGH 7.2 | 1.2 % | ||
| CVE-2023-51364 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 8.7 | 40 % | ||
| CVE-2023-51365 | | QTS, QuTS hero, QuTScloud | HIGH 8.7 | 35 % | ||
| CVE-2024-21905 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 8.2 | 0.5 % | ||
| CVE-2024-27124 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.5 | 1.4 % | ||
| CVE-2024-32766 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | CRITICAL 10.0 | 2.3 % | ||
| CVE-2024-21900 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | MEDIUM 6.5 | 9.4 % | ||
| CVE-2024-21899 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | CRITICAL 9.8 | 24 % | ||
| CVE-2023-32969 | c5.x.x – < c5.1.5.2651 | Network & Virtual Switch | MEDIUM 4.9 | 0.3 % | ||
| CVE-2023-50358 | c5.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | MEDIUM 5.8 | 14 % | ||
| CVE-2023-47218 | c5.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 8.3 | 90 % | ||
| CVE-2023-47568 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 8.8 | 0.5 % | ||
| CVE-2023-47567 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.1 % | ||
| CVE-2023-47566 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.2 % | ||
| CVE-2023-45037 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-45036 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-45035 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-45028 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-45027 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-45026 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-45025 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-41292 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-41283 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.0 % | ||
| CVE-2023-41282 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.0 % | ||
| CVE-2023-41281 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.0 % | ||
| CVE-2023-41280 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-41279 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-41278 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.5 % | ||
| CVE-2023-41277 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.5 % | ||
| CVE-2023-41276 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.5 % | ||
| CVE-2023-41275 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.5 % | ||
| CVE-2023-41274 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-41273 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-39303 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | CRITICAL 9.8 | 0.5 % | ||
| CVE-2023-39297 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 8.8 | 1.4 % | ||
| CVE-2023-39302 | c5.x.x – < c5.1.5.2651 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.1 % | ||
| CVE-2023-32967 | c5.x.x – < c5.1.5.2651 | QTS, QuTScloud | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-23367 | c5.x.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 1.5 % | ||
| CVE-2023-39301 | c5.x.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | MEDIUM 4.3 | 0.3 % | ||
| CVE-2023-23368 | c5.x.x – < c5.0.1.2374 | QTS, QuTS hero, QuTScloud | CRITICAL 9.8 | 19 % | ||
| CVE-2023-34975 | | QTS, QuTS hero, QuTScloud | HIGH 8.8 | 1.2 % | ||
| CVE-2023-32974 | c5.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | HIGH 7.5 | 0.7 % | ||
| CVE-2023-32973 | c5.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-32970 | c5.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | MEDIUM 4.9 | 0.6 % | ||
| CVE-2023-32972 | c5.0.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-32971 | c5.0.x – < c5.1.0.2498 | QTS, QuTS hero, QuTScloud | HIGH 7.2 | 0.6 % | ||
| CVE-2023-23362 | c5.0.1 – < c5.0.1.2374 | QTS, QuTS hero, QuTScloud | HIGH 8.8 | 1.6 % | ||
| CVE-2023-23355 | c5.0.1 – < c5.0.1.2374 | QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR | HIGH 7.2 | 1.2 % | ||
| CVE-2021-44054 | unspecified – < c5.0.1.1949 | Open redirect | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-44053 | unspecified – < c5.0.1.1949 | Reflected XSS | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-44052 | unspecified – < c5.0.1.1998 | Arbitrary file read | HIGH 8.1 | 1.6 % | ||
| CVE-2021-44051 | unspecified – < c5.0.1.1949 | Command injection | HIGH 8.8 | 1.7 % | ||
| CVE-2021-38693 | unspecified – < c5.0.1.1949 | Path Traversal in thttpd | MEDIUM 5.3 | 1.0 % | ||
| CVE-2021-38674 | unspecified – < c4.5.7.1864 | Reflected XSS Vulnerability in TFTP | MEDIUM 6.1 | 0.7 % | ||
| CVE-2021-34343 | unspecified – < c4.5.6.1755 | Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud | HIGH 7.2 | 1.9 % | ||
| CVE-2021-28816 | unspecified – < c4.5.6.1755 | Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud | HIGH 8.8 | 0.9 % | ||
| CVE-2018-19957 | unspecified – < c4.5.6.1755 build 20210809 | Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud | MEDIUM 6.1 | 0.7 % | ||
| CVE-2021-28800 | | Command Injection Vulnerability in QTS | CRITICAL 9.8 | 1.4 % | ||
| CVE-2021-28806 | unspecified – < c4.5.5.1656 Build 20210503 | DOM-Based XSS Vulnerability in QTS and QuTS hero | MEDIUM 5.7 | 0.5 % | ||
| CVE-2018-19942 | unspecified – < c4.5.4.1601 build 20210309 ; unspecified – < c4.5.3.1454 build 20201013 | Cross-site Scripting Vulnerability in File Station | MEDIUM 6.1 | 0.7 % | ||
| CVE-2018-19941 | unspecified – < c4.5.2.1379 | Cleartext Storage of Sensitive Information in Cookies | HIGH 7.5 | 0.7 % |