Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-02-27	CVE-2017-16770	Information Exposure vulnerability in Synology Surveillance Station File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter. network low complexity synology CWE-200	6.5
2018-02-27	CVE-2017-16767	Cross-site Scripting vulnerability in Synology Surveillance Station Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter. network low complexity synology CWE-79	5.4