CVE-2019-7185

MEDIUM 4.8CVE-2019-7185 · Published 05/12/2019 · updated 17/06/2026

In short

CVE-2019-7185 is a MEDIUM (CVSS 4.8) vulnerability affecting music station (qnap).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.5% of all vulnerabilities.
Fix: update to 5.1.11, 5.2.7, 5.3.5 or later.

Package	Affected versions	Patched versions
music station qnap	`< 5.1.11< 5.2.7< 5.3.5`	`5.1.115.2.75.3.5`

Description

This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.

References

qnap.com/zh-tw/security-advisory/nas-201911-27 · Vendor Advisory

More vulnerabilities in music station

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

music station

qnap

< 5.1.11< 5.2.7< 5.3.5

5.1.115.2.75.3.5

More vulnerabilities in music station

See all →