Vulnerability Details CVE-2020-11749
Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.056
EPSS Ranking 89.9%
CVSS Severity
CVSS v3 Score 9.0
CVSS v2 Score 8.5
Products affected by CVE-2020-11749
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_703
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_704
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_705
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_706
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_707
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_708
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_709
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_710
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_711
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_712
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_713
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_714
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_715
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_716
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_717
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_718
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_719
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_720
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_721
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_722
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_723
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_724
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_725
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_735
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_759
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_760
-
cpe:2.3:a:pandorafms:pandora_fms:7.0_ng_761
-
cpe:2.3:a:pandorafms:pandora_fms:7.44
-
cpe:2.3:a:pandorafms:pandora_fms:742
-
cpe:2.3:a:pandorafms:pandora_fms:746