Filtered by vendor Qstar Subscriptions
Total 9 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-51071 1 Qstar 1 Archive Storage Manager 2024-11-21 6.5 Medium
An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link.
CVE-2023-51070 1 Qstar 1 Archive Storage Manager 2024-11-21 7.5 High
An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server.
CVE-2023-51068 1 Qstar 1 Archive Storage Manager 2024-11-21 5.4 Medium
An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link.
CVE-2023-51067 1 Qstar 1 Archive Storage Manager 2024-11-21 6.1 Medium
An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link.
CVE-2023-51066 1 Qstar 1 Archive Storage Manager 2024-11-21 8.8 High
An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands.
CVE-2023-51065 1 Qstar 1 Archive Storage Manager 2024-11-21 7.5 High
Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server.
CVE-2023-51064 1 Qstar 1 Archive Storage Manager 2024-11-21 6.1 Medium
QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=tree_table.
CVE-2023-51063 1 Qstar 1 Archive Storage Manager 2024-11-21 8.8 High
QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulnerability within the component qnme-ajax?method=tree_level.
CVE-2023-51062 1 Qstar 1 Archive Storage Manager 2024-11-21 5.3 Medium
An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command.