Pandora FMS 765

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pandorafms:pandora_fms:765:*:*:*:*:*:*:*

part: a version: 765 update: *

VendorPandorafms (6dd09729-52ac-5fa0-840b-b06085373091)
ProductPandora Fms (97cd3d25-cd26-53e0-8e83-24b89fef581e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45437 vulnerable 2026-06-08 05:50:36.339659 Stored cross-site scripting vulnerability in the reporting dashboard module
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting (XSS). A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload without interaction and attacker can get information.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-18T19:20:57.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45436 vulnerable 2026-06-08 05:50:36.339033 Stored cross-site scripting vulnerability in network maps editor feature
MEDIUM (6.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting (XSS). As a manager privilege user , create a network map containing name as xss payload. Once created, admin user must click on the edit network maps and XSS payload will be executed, which could be used for stealing admin users cookie value.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-18T19:21:22.938Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.