H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2018-19943

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Vulnerability
TypeVulnerability
External ID—
First seen2022-05-24
Last seen2022-05-24

Confidence

—

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productQNAP Network Attached Storage (NAS)
Added2022-05-24
Due date2022-06-14
11 recorded

Relationships

mitigates
from Remediate CVE-2018-19943
Mitigation
related-to
to AJAX Footprinting
Technique
related-to
to Cross-Site Scripting (XSS)
Technique
related-to
to DOM-Based XSS
Technique
related-to
to PHP Remote File Inclusion
Technique
related-to
to Reflected XSS
Technique
related-to
to Stored XSS
Technique
related-to
to XSS Targeting Non-Script Elements
Technique
related-to
to XSS Through HTTP Headers
Technique
related-to
to XSS Through HTTP Query Strings
Technique
related-to
to XSS Using MIME Type Mismatch
Technique
3 external

References

nvd
CVE-2018-19943
open
cwe
CWE-79
open
cwe
CWE-80
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance