QuMagie_CVE-2025-62857

2.2 / 10

LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:U

Description

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version:
QuMagie 2.8.1 and later

Basic Information

ID CVE-2025-62857

Source qnap

Published Jan 2, 2026 at 14:51

Affected Product

Vendor QNAP Systems Inc.

Product QuMagie

Version 2.x

Affected Versions QNAP Systems Inc. QuMagie 2.x

CWE Classification

CWE-79

References

www.qnap.com /en/security-advisory/qsa-25-49

{
    "lastseen": "",
    "description": "A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following version:\nQuMagie 2.8.1 and later",
    "published": "2026-01-02T14:51:49.742Z",
    "modified": "2026-01-02T14:51:49.742Z",
    "type": "cve",
    "title": "QuMagie",
    "source": "qnap",
    "references": "https://www.qnap.com/en/security-advisory/qsa-25-49",
    "id": "CVE-2025-62857",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79"
    ],
    "cvelist": null,
    "sourceData": "QNAP Systems Inc. QuMagie 2.x",
    "sourceHref": "",
    "cvss": {
        "score": 2.2,
        "severity": "LOW",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:U",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "QuMagie",
    "version": "2.x",
    "vendor": "QNAP Systems Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}