PT-2025-45432 · Unknown · Qulog Center

Published 2025-11-07 · Updated 2025-11-07 · CVE-2025-54168

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.8.2.923

Description A cross-site scripting (XSS) issue exists in QuLog Center. Successful exploitation by a remote attacker who has obtained administrator privileges could allow them to bypass security features or access application data.

Recommendations Update to QuLog Center version 1.8.2.923 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-54168

Affected Products

Qulog Center

References · 5

• https://osv.dev/vulnerability/CVE-2025-54168 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54168 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-42 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1986864548192645307 · Twitter Post
• https://t.me/CVEtracker/36769 · Telegram Post