Synology Directory Server — known CVE vulnerabilities

Every CVE whose affected-product data names Synology Directory Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-14907 — CVSS 6.5 (medium): All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level =…
• CVE-2019-19344 — CVSS 6.5 (medium): There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x…
• CVE-2019-3870 — CVSS 6.1 (medium): A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD…
• CVE-2020-1472 — CVSS 5.5 (medium) — actively exploited: An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain…