Vulnerabilidades em Cacti
49 resultadosCVE-2022-46169CRITICALUnauthenticated Command InjectionEPSS 99.8%KEVCVE-2024-29895CRITICALCacti command injection in cmd_realtime.phpEPSS 94.4%CVE-2023-39361CRITICALUnauthenticated SQL Injection in graph_view.php in CactiEPSS 87.6%CVE-2024-25641CRITICALCacti RCE vulnerability when importing packagesEPSS 86.3%CVE-2023-49085HIGHCacti SQL Injection vulnerabilityEPSS 84.6%CVE-2023-39362HIGHAuthenticated command injection in SNMP options of a DeviceEPSS 82.2%CVE-2023-49084HIGHLocal File Inclusion (RCE) in CactiEPSS 63.8%CVE-2025-24367HIGHCacti allows Arbitrary File Creation leading to RCEEPSS 49.1%CVE-2024-54146HIGHCacti has a SQL Injection vulnerability when view host templateEPSS 37.3%CVE-2024-43363HIGHRemote code execution via Log Poisoning in CactiEPSS 35.8%CVE-2024-43362HIGHStored Cross-site Scripting (XSS) when creating external links in CactiEPSS 35.5%CVE-2024-43364MEDIUMStored Cross-site Scripting (XSS) when creating external links in CactiEPSS 34.4%CVE-2024-31445HIGHSQL Injection vulnerability in automation_get_new_graphs_sqlEPSS 26.2%CVE-2024-43365MEDIUMStored Cross-site Scripting (XSS) when creating external links in CactiEPSS 22.5%CVE-2024-31444MEDIUMCacti XSS vulnerability in lib/html.php by reading dirty data stored in databaseEPSS 14.7%CVE-2024-31458MEDIUMCacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in databaseEPSS 12.6%CVE-2025-66399HIGHSNMP Command Injection leads to RCE in CactiEPSS 10.8%CVE-2023-51448HIGHSQL Injection vulnerability when managing SNMP Notification ReceiversEPSS 9.0%CVE-2025-22604CRITICALCacti has Authenticated RCE via multi-line SNMP responsesEPSS 4.8%CVE-2024-45598MEDIUMCacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log PathEPSS 2.8%