Approved changes feed: RSS · Atom

cpe:2.3:a:ganglia:ganglia-web:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGanglia (22229238-47f5-5cd8-9418-4d62d209e047)
ProductGanglia Web (e9e5fa33-a6e0-5762-b2d4-c70e5d273c77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ganglia-web purl2cpe 2026-06-01 10:15:54.460578
pkg:deb/ubuntu/ganglia-web purl2cpe 2026-06-01 10:15:54.460582
pkg:github/ganglia/ganglia-web purl2cpe 2026-06-01 10:15:54.460584
pkg:rpm/opensuse/ganglia-web purl2cpe 2026-06-01 10:15:54.460587
pkg:sourceforge/ganglia purl2cpe 2026-06-01 10:15:54.460590

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52763 vulnerable 2026-06-08 06:52:16.201297 Details available
A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter.
Published: 2024-11-19T00:00:00.000Z
Updated: 2024-11-20T20:57:53.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52762 vulnerable 2026-06-08 06:52:16.200718 Details available
A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.
Published: 2024-11-19T00:00:00.000Z
Updated: 2024-11-20T19:25:19.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20379 vulnerable 2026-06-08 05:13:40.509652 Details available
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.
Published: 2020-01-11T03:00:51.000Z
Updated: 2024-08-05T02:39:09.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20378 vulnerable 2026-06-08 05:13:40.509264 Details available
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
Published: 2020-01-11T03:01:00.000Z
Updated: 2024-08-05T02:39:09.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6816 vulnerable 2026-06-08 05:06:53.107973 Details available
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T07:29:25.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0275 vulnerable 2026-06-08 05:03:46.710271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3448 vulnerable 2026-06-08 05:02:09.945074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.