CVE-2023-41815highCWE-79

CVE-2023-41815: falha de alta gravidade em Pandora FMS

XSS in File manager

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Pandora FMS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Malicious code could be executed in the File Manager section. This issue affects Pandora FMS: from 700 through 774.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
Produtos afetados
Pandora FMS · Pandora FMS
CVEs relacionadas — Pandora FMS

No mesmo produto, das mais perigosas para as menos.

CVE-2024-11320MEDIUMCommand Injection leading to RCE via LDAP MisconfigurationEPSS 91.2%CVE-2024-12971HIGHQuickShell Authenticated Command InjectionEPSS 61.5%CVE-2025-5306HIGHCommand Injection in Netflow pathEPSS 35.7%CVE-2024-12992HIGHRemote Code Execution leads to Command InjectionEPSS 1.2%CVE-2026-34188HIGHOS Command Injection in Event Response ExecutionEPSS 1.1%CVE-2024-35304CRITICALSystem command injection through Netflow functionEPSS 1.1%