What’s Vulnerable › Vulnerabilities

CVE-2015-9104

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-30 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title.

Affected products

• Synology Audio Station: 5.1-2541, 5.1-2542, 5.1-2547, 5.1-2549, 5.4-2852, 5.4-2853 (+1)

References

• http://www.fortiguard.com/zeroday/FG-VD-15-106
• https://www.synology.com/en-global/support/security/Audio_Station_5_4_2857
• http://www.fortiguard.com/zeroday/FG-VD-15-106
• https://www.synology.com/en-global/support/security/Audio_Station_5_4_2857

Get alerted when CVE-2015-9104 or the next vulnerability affects your stack