Pandorafms vulnerabilities
We track 4 vulnerabilities in Pandorafms products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2024.
Latest Pandorafms vulnerabilities
- 8.8 High severity
Pandora FMS: Improper Neutralization of Special Elements used in an SQL Command
A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issue affects Pandora FMS: from 700 through <777.3.
- 9.8 Critical severity
Pandora FMS: Improper Neutralization of Argument Delimiters in a Command
Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through <777.
- 9.8 Critical severity
Pandora FMS: Improper Neutralization of Special Elements used in an OS Command
System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through <777.
- 7.1 High severity
Pandora FMS: Cross-Site Request Forgery
A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on