PatchTheCVE: archive storage managerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-51071: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated https://patchthecve.com/cve/CVE-2023-51071.htmlhttps://patchthecve.com/cve/CVE-2023-51071.htmlWed, 17 Jun 2026 06:40:29 +0000MEDIUM 6.5: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link.CVE-2023-51070: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated https://patchthecve.com/cve/CVE-2023-51070.htmlhttps://patchthecve.com/cve/CVE-2023-51070.htmlWed, 17 Jun 2026 06:40:29 +0000HIGH 7.5: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server.CVE-2023-51068: An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASEhttps://patchthecve.com/cve/CVE-2023-51068.htmlhttps://patchthecve.com/cve/CVE-2023-51068.htmlWed, 17 Jun 2026 06:40:29 +0000MEDIUM 5.4: An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link.CVE-2023-51067: An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEAhttps://patchthecve.com/cve/CVE-2023-51067.htmlhttps://patchthecve.com/cve/CVE-2023-51067.htmlWed, 17 Jun 2026 06:40:29 +0000MEDIUM 6.1: An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link.CVE-2023-51066: An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Pahttps://patchthecve.com/cve/CVE-2023-51066.htmlhttps://patchthecve.com/cve/CVE-2023-51066.htmlWed, 17 Jun 2026 06:40:29 +0000HIGH 8.8: An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands.CVE-2023-51065: Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticatedhttps://patchthecve.com/cve/CVE-2023-51065.htmlhttps://patchthecve.com/cve/CVE-2023-51065.htmlWed, 17 Jun 2026 06:40:28 +0000HIGH 7.5: Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server.CVE-2023-51064: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XShttps://patchthecve.com/cve/CVE-2023-51064.htmlhttps://patchthecve.com/cve/CVE-2023-51064.htmlWed, 17 Jun 2026 06:40:28 +0000MEDIUM 6.1: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=tree_table.CVE-2023-51063: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Crhttps://patchthecve.com/cve/CVE-2023-51063.htmlhttps://patchthecve.com/cve/CVE-2023-51063.htmlWed, 17 Jun 2026 06:40:28 +0000HIGH 8.8: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulnerability within the component qnme-ajax?method=tree_level.CVE-2023-51062: An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Buildhttps://patchthecve.com/cve/CVE-2023-51062.htmlhttps://patchthecve.com/cve/CVE-2023-51062.htmlWed, 17 Jun 2026 06:40:28 +0000MEDIUM 5.3: An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command.