Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:cacti:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Cacti (0c2a1c54-85ee-5dea-90cd-2f81d80acf83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3816 |
vulnerable | 2026-06-08 05:33:54.368997 |
Details available
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.
Published: 2022-01-19T20:38:50.000Z
Updated: 2024-08-03T17:09:09.541Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26247 |
vulnerable | 2026-06-08 05:30:42.060844 |
Details available
As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.
Published: 2022-01-19T20:38:53.000Z
Updated: 2024-08-03T20:19:20.307Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23225 |
vulnerable | 2026-06-08 05:30:02.531933 |
Details available
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php.
Published: 2022-01-19T20:38:52.000Z
Updated: 2024-08-03T19:05:54.697Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.