Vendor/product archive

synology / sso_server CVEs

Beta · best-effort

2 CVEs tagged to synology / sso_server — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to synology vendor archive

CVE-2022-27620

Published Aug 3, 2022

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticat…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-16775

Published Apr 1, 2019

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1