QNAP Qmailagent vulnerabilities

2 CVEs affecting QNAP Qmailagent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34358, published 2021-11-20.

More from QNAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-34357, published 2021-11-13. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have…
• CVE-2021-34358, published 2021-11-20. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later