CVE-2017-16775: Synology SSO Server

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Affected products

• Synology SSO Server: before 2.1.3-0129 (fixed in 2.1.3-0129)

Published 2019-04-01. Last modified 2026-06-17.