Login Request a demo
CS
Product
Carddav Server
by Synology · last CVE Jul 28, 2022
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities3Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Carddav Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-15887
9.8
2%
Nov 7
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user…
Affected: before 6.0.7-0085
CVE-2022-27613
8.8
1%
Jul 28
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote…
Affected: before 6.0.10-0153
CVE-2018-8928
5.4
1%
Jul 5
Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or…
Affected: before 6.0.8-0086
Showing 3