5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
Improper Neutralization of Special Elements used in an SQL Command (βSQL Injectionβ) vulnerability in Pandora FMS on all allows SQL Injection.Β Arbitrary SQL queries were allowed to be executed using any account with low privileges.Β This issue affects Pandora FMS: from 700 through 774.
[
{
"defaultStatus": "unaffected",
"platforms": [
"all"
],
"product": "Pandora FMS",
"vendor": "Pandora FMS",
"versions": [
{
"lessThanOrEqual": "774",
"status": "affected",
"version": "700",
"versionType": "custom"
}
]
}
]
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%