Cross-Site Scripting Vulnerability in QNAP Operating Systems
CVE-2025-22483

7.1HIGH

Key Information:

Vendor

QNAP
Status
License Center
Vendor
CVE Published:
29 August 2025

What is CVE-2025-22483?

A cross-site scripting vulnerability has been discovered in multiple versions of QNAP operating systems. This flaw allows a remote attacker with access to an administrator account to exploit the system, potentially bypassing established security measures, leading to unauthorized access to sensitive application data. Prompt action is advised to mitigate the risks associated with this vulnerability. The issue has been addressed in License Center versions 1.8.51 and 1.9.51 and later.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

License Center 1.8.x < 1.8.51

License Center 1.9.x < 1.9.51

References

https://www.qnap.com/en/security-advisory/qsa-25-27

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Milan Solanki (LeoSecurity)
JSON
.