Pandora Fms
Approved changes feed: RSS · Atom
cpe:2.3:a:artica_pfms:pandora_fms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Artica Pfms (f02d9cb6-8b04-5290-aab7-0f5020d426c2) |
|---|---|
| Product | Pandora Fms (40956b44-e466-5baa-8bf9-994a07d3c04d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2807 |
vulnerable | 2026-06-08 06:02:43.038756 |
Authentication bypass in password reset process
MEDIUM (6.4)
Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.
Published: 2023-06-13T11:10:59.966Z
Updated: 2025-01-03T15:22:20.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24518 |
vulnerable | 2026-06-08 05:56:05.830071 |
Disabling the administrator's account through cross-site request forgery
MEDIUM (6.7)
A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.
Published: 2023-10-03T10:41:42.777Z
Updated: 2024-09-23T14:57:35.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24517 |
vulnerable | 2026-06-08 05:56:05.829413 |
Remote Code Execution via Unrestricted File Upload
MEDIUM (6.4)
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms.
Published: 2023-08-22T13:05:17.554Z
Updated: 2024-10-03T13:29:05.911Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24516 |
vulnerable | 2026-06-08 05:56:05.828993 |
Stored Cross Site Scripting - Special Days Module
MEDIUM (5.9)
Cross-site Scripting (XSS) vulnerability in the Pandora FMS Special Days component allows an attacker to use it to steal the session cookie value of admin users easily with little user interaction. This issue affects Pandora FMS v767 version and prior versions on all platforms.
Published: 2023-08-22T13:03:39.181Z
Updated: 2024-09-06T14:13:21.668Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24515 |
vulnerable | 2026-06-08 05:56:05.828555 |
Server side request forgery in api checker
MEDIUM (5.2)
Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the URL scheme used while retrieving API URL. Rather than validating the http/https scheme, the application allows other scheme such as file, which could allow a malicious user to fetch internal file content. This issue affects Pandora FMS v767 version and prior versions on all platforms.
Published: 2023-08-22T12:59:25.617Z
Updated: 2024-10-03T13:29:38.308Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24514 |
vulnerable | 2026-06-08 05:56:05.827328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0828 |
vulnerable | 2026-06-08 05:52:32.905875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47373 |
vulnerable | 2026-06-08 05:50:40.211569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47372 |
vulnerable | 2026-06-08 05:50:40.180546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45437 |
vulnerable | 2026-06-08 05:50:36.339511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45436 |
vulnerable | 2026-06-08 05:50:36.337990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43980 |
vulnerable | 2026-06-08 05:49:35.204733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43979 |
vulnerable | 2026-06-08 05:49:35.204198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43978 |
vulnerable | 2026-06-08 05:49:35.202588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2059 |
vulnerable | 2026-06-08 05:42:50.172300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2032 |
vulnerable | 2026-06-08 05:42:50.121758 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26310 |
vulnerable | 2026-06-08 05:41:50.839132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26309 |
vulnerable | 2026-06-08 05:41:50.838776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26308 |
vulnerable | 2026-06-08 05:41:50.837543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1648 |
vulnerable | 2026-06-08 05:39:13.627696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0507 |
vulnerable | 2026-06-08 05:39:10.179490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46681 |
vulnerable | 2026-06-08 05:38:03.704564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46680 |
vulnerable | 2026-06-08 05:38:03.704045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46679 |
vulnerable | 2026-06-08 05:38:03.703602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46678 |
vulnerable | 2026-06-08 05:38:03.703135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46677 |
vulnerable | 2026-06-08 05:38:03.702686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46676 |
vulnerable | 2026-06-08 05:38:03.700919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.