Skip to contentPandorafms Pandora Fms vulnerabilities
- artica st pandora fms, pandora fms fms +1 morePandora FMS Authenticated Remote Code Execution via Ping ModuleCVE-2025-34088Public exploit8.6 High
- pandora fms fms, pandorafms pandora fms +1 moreCommand Injection leading to RCE via LDAP MisconfigurationCVE-2024-11320Public exploitEPSS 91.2%6.9 Medium
- pandora fms fms, pandorafms pandora fms +1 morePost-auth Arbitrary File Read in the Server Plugins SectionCVE-2024-353088.3 High
- pandora fms fms, pandorafms pandora fms +1 moreSQL Injection in CSV Module Data CollectionCVE-2024-99878.6 High
- artica pandora fms, pandora fms fms +1 moreArgument Injection Leading to Remote Code Execution in Realtime Graph ExtensionCVE-2024-353079.4 Critical
- artica pandora fms, pandora fms fms +1 moreSystem command injection through Netflow functionCVE-2024-353049.3 Critical
- artica pandora fms, pandora fms fms +1 morePath Traversal and Untrusted Upload FileCVE-2023-417936.7 Medium
- pandora fms fms, pandorafms pandora fms +1 moreXSS in Visual ConsoleCVE-2023-440896.1 Medium
- pandora fms fms, pandorafms pandora fms +1 moreSQL Injection in Visual ConsoleCVE-2023-44088Public exploit5.9 Medium
- pandora fms fms, pandorafms pandora fms +1 moreXSS in File managerCVE-2023-418157.5 High
- pandora fms fms, pandorafms pandora fms +1 moreXSS Vulnerability MessagesCVE-2023-418143.7 Low
- pandora fms fms, pandorafms pandora fms +1 moreUser notification settings editionCVE-2023-418133.0 Low
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site Scripting in syslog sectionCVE-2023-08286.7 Medium
- artica pfms pandora fms, pandora fms fms +1 moreDisabling the administrator's account through cross-site request forgeryCVE-2023-245186.7 Medium
- artica pfms pandora fms, pandora fms fms +1 moreRemote Code Execution via Unrestricted File UploadCVE-2023-24517Public exploit6.4 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site Scripting - Special Days ModuleCVE-2023-245165.9 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site Scripting Vulnerability in Visual Console ModuleCVE-2023-245146.3 Medium
- artica pfms pandora fms, pandora fms fms +1 moreServer side request forgery in api checkerCVE-2023-245155.2 Medium
- artica pfms pandora fms, pandora fms fms +1 moreAuthentication bypass in password reset processCVE-2023-28076.4 Medium
- artica pfms pandora fms, pandora fms fms +1 moreReflected Cross Site Scripting in Search Functionality of Module LibraryCVE-2022-47373Public exploit6.4 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored cross-site scripting vulnerability in create event sectionCVE-2022-473727.6 High
- artica pfms pandora fms, pandora fms fms +1 moreStored cross-site scripting vulnerability in the reporting dashboard moduleCVE-2022-454376.5 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored cross-site scripting vulnerability in network maps editor featureCVE-2022-45436Public exploit6.1 Medium
- artica pfms pandora fms, pandora fms fms +1 moreCross-site scripting vulnerability in the network maps edit functionalityCVE-2022-43980Public exploit5.2 Medium
- artica pfms pandora fms, pandora fms fms +1 morePath Traversal leading to Local File InclusionCVE-2022-439795.9 Medium
- artica pfms pandora fms, pandora fms fms +1 moreLimited Authentication bypass due to hardcoded secretCVE-2022-439785.6 Medium
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability XSS in service form name fieldCVE-2021-466784.0 Medium
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability XSS in module form name fieldCVE-2021-466804.0 Medium
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability XSS in Event filter name fieldCVE-2021-466774.0 Medium
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability XSS in Transaction Map name fieldCVE-2021-466764.0 Medium
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability XSS in service elementsCVE-2021-466794.0 Medium
- artica pfms pandora fms, pandora fms fms +1 moreImproper Authorization in User Management to Vertical Privilege EscalationCVE-2022-263107.3 High
- artica pfms pandora fms, pandora fms fms +1 moreCross-Site Request en Bulk operation (User operation)CVE-2022-263093.7 Low
- artica pfms pandora fms, pandora fms fms +1 moreImproper Access Control in Configuration (Credential store)CVE-2022-263083.7 Low
- artica pfms pandora fms, pandora fms fms +1 moreRelative Path Traversal to Remote Code Execution in File ManagerCVE-2022-16485.7 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site-Scripting in Agent ManagerCVE-2022-20593.5 Low
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site-Scripting in File ManagerCVE-2022-20323.5 Low
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability: Authenticated SQL Injection in APICVE-2022-05075.8 Medium
- pandorafms pandora fmsPandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console....CVE-2021-355015.4 Medium
- pandorafms pandora fmsPandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the...CVE-2021-340749.8 Critical
- pandorafms pandora fmsPandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A...CVE-2020-11749Public exploitEPSS 16.2%9.0 Critical
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows remote command execution via the events feature.CVE-2020-13851Public exploitEPSS 91.0%8.8 High
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via...CVE-2020-13852EPSS 27.6%7.2 High
- pandorafms pandora fmsArtica Pandora FMS 7.44 has persistent XSS in the Messages feature.CVE-2020-138535.4 Medium
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows privilege escalation.CVE-2020-138549.8 Critical
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via...CVE-2020-13855EPSS 27.6%7.2 High
- pandorafms pandora fmsArtica Pandora FMS 7.44 has inadequate access controls on a web folder.CVE-2020-138507.5 High
- pandorafms pandora fmsPandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report...CVE-2019-199685.4 Medium
- pandorafms pandora fmsArtica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper...CVE-2019-130357.8 High
- pandorafms artica pandora fmsXSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a...CVE-2018-112235.4 Medium