Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:1.1.38:*:*:*:*:*:*:*

part: a version: 1.1.38 update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.918313
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.918314
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.918316
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.918317
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.918318

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3816 vulnerable 2026-06-08 05:33:54.370071 Details available
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.
Published: 2022-01-19T20:38:50.000Z
Updated: 2024-08-03T17:09:09.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23225 vulnerable 2026-06-08 05:30:02.532898 Details available
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php.
Published: 2022-01-19T20:38:52.000Z
Updated: 2024-08-03T19:05:54.697Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.