8.7 High
CVSS4
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/SC:H/VI:H/SI:H/VA:L/SA:L/AU:Y/U:Red/R:U/RE:L
0.0004 Low
EPSS
Percentile
9.6%
OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables.Β This issue affects Pandora FMS: from 700 through <777.
[
{
"defaultStatus": "unaffected",
"platforms": [
"all"
],
"product": "Pandora FMS",
"vendor": "Pandora FMS",
"versions": [
{
"lessThan": "777",
"status": "affected",
"version": "700",
"versionType": "custom"
}
]
}
]