Multiple Vulnerabilities in Notes Station 3

Summary

Multiple vulnerabilities have been reported to affect Notes Station 3:

• CVE-2024-27122, CVE-2024-27126: If exploited, the cross-site scripting (XSS) vulnerabilities could allow remote attackers who have gained user access to inject malicious code.

We have already fixed the vulnerabilities in the following versions:

Recommendation

To fix the vulnerabilities, we recommend updating Notes Station 3 to the latest version.

Updating Notes Station 3

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "Notes Station 3" and then press ENTER.
   Notes Station 3 appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Notes Station 3 is already up to date.
5. Click OK.
   The application is updated.