Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:1.2.12:*:*:*:*:*:*:*

part: a version: 1.2.12 update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.918422
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.918424
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.918425
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.918426
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.918428

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-23226 vulnerable 2026-06-08 05:22:31.820728 Details available
Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_admin.php, and (7) data_input.php.
Published: 2021-08-27T00:00:00.000Z
Updated: 2024-08-04T14:58:14.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14295 vulnerable 2026-06-08 05:19:22.846694 Details available
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
Published: 2020-06-17T13:47:36.000Z
Updated: 2024-08-04T12:39:36.215Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.