CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-41789

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allows an attacker to perform cookie hijacking and log in as that user without the need for credentials. This issue affects Pandora FMS: from 700 through 773.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.7%

CVSS Severity

CVSS v3 Score 7.6

References

Products affected by CVE-2023-41789

Artica » Pandora Fms » Version: 700

cpe:2.3:a:artica:pandora_fms:700
Artica » Pandora Fms » Version: 740

cpe:2.3:a:artica:pandora_fms:740
Artica » Pandora Fms » Version: 741

cpe:2.3:a:artica:pandora_fms:741
Artica » Pandora Fms » Version: 742

cpe:2.3:a:artica:pandora_fms:742
Artica » Pandora Fms » Version: 743

cpe:2.3:a:artica:pandora_fms:743
Artica » Pandora Fms » Version: 744

cpe:2.3:a:artica:pandora_fms:744
Artica » Pandora Fms » Version: 745

cpe:2.3:a:artica:pandora_fms:745
Artica » Pandora Fms » Version: 746

cpe:2.3:a:artica:pandora_fms:746
Artica » Pandora Fms » Version: 747

cpe:2.3:a:artica:pandora_fms:747
Artica » Pandora Fms » Version: 748

cpe:2.3:a:artica:pandora_fms:748
Artica » Pandora Fms » Version: 749

cpe:2.3:a:artica:pandora_fms:749
Artica » Pandora Fms » Version: 750

cpe:2.3:a:artica:pandora_fms:750
Artica » Pandora Fms » Version: 751

cpe:2.3:a:artica:pandora_fms:751
Artica » Pandora Fms » Version: 752

cpe:2.3:a:artica:pandora_fms:752
Artica » Pandora Fms » Version: 753

cpe:2.3:a:artica:pandora_fms:753
Artica » Pandora Fms » Version: 754

cpe:2.3:a:artica:pandora_fms:754
Artica » Pandora Fms » Version: 755

cpe:2.3:a:artica:pandora_fms:755
Artica » Pandora Fms » Version: 773

cpe:2.3:a:artica:pandora_fms:773

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-41789

Products

Pricing

Contact Us