CVE-2015-9103: Synology Note Station

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) note title or (2) file name of attachments.

Affected products

• Synology Note Station: up to and including 1.1-0212

Published 2017-06-30. Last modified 2026-06-17.