qstar records

9 published records for vendor qstar.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2023-51066No exploit	An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbiqstar · archive storage manager · CWE-94 RCE	High8.8	—	1.4%	Jan 13, 2024
35Monitor	CVE-2023-51063No exploit	QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulneqstar · archive storage manager · CWE-79 Pre-auth XSS	High8.8	—	0.3%	Jan 13, 2024
30Monitor	CVE-2023-51065No exploit	Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system baqstar · archive storage manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.6%	Jan 13, 2024
30Monitor	CVE-2023-51070No exploit	An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjusqstar · archive storage manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Jan 13, 2024
26Monitor	CVE-2023-51071No exploit	An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disabqstar · archive storage manager Pre-auth	Medium6.5	—	0.5%	Jan 13, 2024
24Monitor	CVE-2023-51067No exploit	An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackerqstar · archive storage manager · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jan 13, 2024
24Monitor	CVE-2023-51064No exploit	QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the comqstar · archive storage manager · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jan 13, 2024
21Monitor	CVE-2023-51062No exploit	An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers toqstar · archive storage manager · CWE-306 Pre-auth Auth bypass	Medium5.3	—	0.5%	Jan 13, 2024
21Monitor	CVE-2023-51068No exploit	An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers qstar · archive storage manager · CWE-79 RCE XSS	Medium5.4	—	0.3%	Jan 13, 2024

CVE-2023-51066
35Monitor
An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbi
HighCVSS 8.8No exploitEPSS 1%
- RCE
qstar · archive storage managerJan 13, 2024
CVE-2023-51063
35Monitor
QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulne
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
qstar · archive storage managerJan 13, 2024
CVE-2023-51065
30Monitor
Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system ba
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
qstar · archive storage managerJan 13, 2024
CVE-2023-51070
30Monitor
An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjus
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
qstar · archive storage managerJan 13, 2024
CVE-2023-51071
26Monitor
An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disab
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
qstar · archive storage managerJan 13, 2024
CVE-2023-51067
24Monitor
An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attacker
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
qstar · archive storage managerJan 13, 2024
CVE-2023-51064
24Monitor
QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the com
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
qstar · archive storage managerJan 13, 2024
CVE-2023-51062
21Monitor
An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
qstar · archive storage managerJan 13, 2024
CVE-2023-51068
21Monitor
An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
qstar · archive storage managerJan 13, 2024