Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:1.2.19:*:*:*:*:*:*:*

part: a version: 1.2.19 update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.918469
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.918470
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.918471
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.918473
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.918474

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-48538 vulnerable 2026-06-08 05:51:34.694384 Details available
In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() allows a zero as the password.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-03T14:17:32.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0730 vulnerable 2026-06-08 05:39:10.669528 Details available
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Published: 2022-03-03T00:00:00.000Z
Updated: 2024-08-02T23:40:03.539Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.