PT-2025-35254 · Qnap · Qnap License Center

Milan Solanki · Published 2025-08-29 · Updated 2025-12-05 · CVE-2025-22483

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions QNAP License Center versions prior to 1.8.51 QNAP License Center versions prior to 1.9.51

Description A cross-site scripting (XSS) vulnerability affects QNAP operating system versions. A remote attacker gaining an administrator account can exploit this issue to bypass security mechanisms or read application data.

Recommendations Update QNAP License Center to version 1.8.51 or later. Update QNAP License Center to version 1.9.51 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-22483

Affected Products

Qnap License Center

References · 7

• https://osv.dev/vulnerability/CVE-2025-22483 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-25-27 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22483 · Security Note
• https://t.me/cveNotify/144948 · Telegram Post
• https://t.me/cveNotify/133967 · Telegram Post
• https://twitter.com/CVEnew/status/1961481716314382498 · Twitter Post
• https://twitter.com/dailycve/status/1997090319418995133 · Twitter Post