archive storage manager vulnerabilities and fixes

Recent CVEs affecting archive storage manager, with upgrade or downgrade steps. 9 tracked.

Also searched as: archivestoragemanager.

archive storage manager has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-01-13. Highest priority: CVE-2023-51066 (score 54/100).

• CVE-2023-51071 MEDIUM 6.5 DOWNGRADE An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated
• CVE-2023-51070 HIGH 7.5 DOWNGRADE An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated
• CVE-2023-51068 MEDIUM 5.4 DOWNGRADE An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE
• CVE-2023-51067 MEDIUM 6.1 DOWNGRADE An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEA
• CVE-2023-51066 HIGH 8.8 DOWNGRADE An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Pa
• CVE-2023-51065 HIGH 7.5 DOWNGRADE Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated
• CVE-2023-51064 MEDIUM 6.1 DOWNGRADE QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XS
• CVE-2023-51063 HIGH 8.8 DOWNGRADE QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cr
• CVE-2023-51062 MEDIUM 5.3 DOWNGRADE An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build

FAQ

How do I fix archive storage manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is archive storage manager being exploited right now?

None of the tracked archive storage manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which archive storage manager CVE should I patch first?

CVE-2023-51066 currently ranks highest (54/100): An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Pa.

RSS feed for archive storage manager · ← Back to latest CVEs