PatchTheCVEqstar vulnerabilities
Recent CVEs affecting qstar products. 9 tracked.
qstar has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-01-13. Highest priority: CVE-2023-51066 (score 54/100).
- CVE-2023-51071 MEDIUM 6.5 DOWNGRADE An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated
- CVE-2023-51070 HIGH 7.5 DOWNGRADE An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated
- CVE-2023-51068 MEDIUM 5.4 DOWNGRADE An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE
- CVE-2023-51067 MEDIUM 6.1 DOWNGRADE An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEA
- CVE-2023-51066 HIGH 8.8 DOWNGRADE An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Pa
- CVE-2023-51065 HIGH 7.5 DOWNGRADE Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated
- CVE-2023-51064 MEDIUM 6.1 DOWNGRADE QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XS
- CVE-2023-51063 HIGH 8.8 DOWNGRADE QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cr
- CVE-2023-51062 MEDIUM 5.3 DOWNGRADE An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build
FAQ
How do I fix qstar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qstar being exploited right now?
None of the tracked qstar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qstar CVE should I patch first?
CVE-2023-51066 currently ranks highest (54/100): An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Pa.