QuLog Center_CVE-2025-58469

1.2 / 10

LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Description

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities.

We have already fixed the vulnerability in the following version:
QuLog Center 1.8.2.927 ( 2025/09/17 ) and later

Basic Information

ID CVE-2025-58469

Source qnap

Published Nov 7, 2025 at 15:08

Modified Nov 7, 2025 at 15:48

Affected Product

Vendor QNAP Systems Inc.

Product QuLog Center

Version 1.8.x.x

Affected Versions QNAP Systems Inc. QuLog Center 1.8.x.x

CWE Classification

CWE-352

References

www.qnap.com /en/security-advisory/qsa-25-42

{
    "lastseen": "",
    "description": "A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities.\n\nWe have already fixed the vulnerability in the following version:\nQuLog Center 1.8.2.927 ( 2025/09/17 ) and later",
    "published": "2025-11-07T15:08:56.159Z",
    "modified": "2025-11-07T15:48:30.618Z",
    "type": "cve",
    "title": "QuLog Center",
    "source": "qnap",
    "references": "https://www.qnap.com/en/security-advisory/qsa-25-42",
    "id": "CVE-2025-58469",
    "bulletinFamily": "",
    "cwe": [
        "CWE-352"
    ],
    "cvelist": null,
    "sourceData": "QNAP Systems Inc. QuLog Center 1.8.x.x",
    "sourceHref": "",
    "cvss": {
        "score": 1.2,
        "severity": "LOW",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "QuLog Center",
    "version": "1.8.x.x",
    "vendor": "QNAP Systems Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}