Alertmanager
Approved changes feed: RSS · Atom
cpe:2.3:a:prometheus:alertmanager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Prometheus (ce7075df-ff22-5cad-855b-357b513f2cea) |
|---|---|
| Product | Alertmanager (cce4970b-99f4-525f-9d7d-2451b86405ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/prometheus-alertmanager |
purl2cpe | 2026-06-01 10:11:49.833774 |
pkg:deb/ubuntu/prometheus-alertmanager |
purl2cpe | 2026-06-01 10:11:49.833777 |
pkg:docker/ubuntu/prometheus-alertmanager |
purl2cpe | 2026-06-01 10:11:49.833780 |
pkg:golang/github.com/prometheus/alertmanager |
purl2cpe | 2026-06-01 10:11:49.833783 |
pkg:rpm/opensuse/alertmanager |
purl2cpe | 2026-06-01 10:11:49.833786 |
pkg:sourceforge/alertmanager.mirror |
purl2cpe | 2026-06-01 10:11:49.833789 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-40577 |
vulnerable | 2026-06-08 06:11:03.670651 |
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
HIGH (7.5)
Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.
Published: 2023-08-25T00:12:13.045Z
Updated: 2025-02-13T17:08:34.242Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.