Login Request a demo
SA
Product
Safeaccess
by Synology · last CVE Nov 30, 2020
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Safeaccess to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-27660
9.8
5%
Nov 30
SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter
Affected: before 1.2.3-0234
CVE-2020-27659
4.8
5%
Nov 30
Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or…
Affected: before 1.2.3-0234
Showing 2