Multiple Vulnerabilities in QuLog Center

Summary

Multiple vulnerabilities have been reported to affect QuLog Center:

• CVE-2025-54168: Cross-site scripting (XSS) vulnerability
  If a remote attacker gains access to an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
• CVE-2025-58469: Cross-site request forgery (CSRF) vulnerability
  A remote attacker can exploit the vulnerability to gain privileges or hijack user identities.

We have already fixed the vulnerabilities in the following version:

Recommendation

To fix the vulnerabilities, we recommend updating QuLog Center to the latest version.

Updating QuLog Center

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "QuLog Center" and then press ENTER.
   QuLog Center appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your QuLog Center is already up to date.
5. Click OK.
   The system updates the application.