Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:7F0722101FF1
HistoryNov 03, 2023 - 6:53 p.m.

[SECURITY] Fedora 39 Update: cacti-1.2.25-1.fc39

2023-11-0318:53:21
lists.fedoraproject.org
20
fedora 39
cacti update
rrdtool
mysql
php
frontend
graph data
complete

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.521 Medium

EPSS

Percentile

97.6%

JSON

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven.

OSVersionArchitecturePackageVersionFilename
Fedora39anycacti< 1.2.25UNKNOWN

Related

openvas 10
nessus 10
fedora 5
debian 2
osv 20
amazon 2
nvd 17
cve 18
ubuntucve 18
cvelist 18
prion 18
debiancve 18
alpinelinux 17
veracode 17
ubuntu 1
githubexploit 1
zdt 1
packetstorm 1
nuclei 2
zdi 2
vulnrichment 1
openvas
openvas
Fedora: Security Advisory for cacti-spine (FEDORA-2023-06a2a6e03c)
2023-10-16 00:00:00
Fedora: Security Advisory for cacti (FEDORA-2023-6335ea9c0c)
2023-10-16 00:00:00
Fedora: Security Advisory for cacti-spine (FEDORA-2023-248dff7cbe)
2023-11-05 00:00:00
nessus
nessus
openSUSE 15 Security Update : cacti, cacti-spine (openSUSE-SU-2023:0275-1)
2023-09-27 00:00:00
Fedora 37 : cacti / cacti-spine (2023-06a2a6e03c)
2023-10-13 00:00:00
Fedora 38 : cacti / cacti-spine (2023-6335ea9c0c)
2023-10-13 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: cacti-spine-1.2.25-1.fc37
2023-10-13 01:33:55
[SECURITY] Fedora 38 Update: cacti-1.2.25-1.fc38
2023-10-13 01:53:22
[SECURITY] Fedora 37 Update: cacti-1.2.25-1.fc37
2023-10-13 01:33:54
debian
debian
[SECURITY] [DSA 5550-1] cacti security update
2023-11-08 22:40:46
[SECURITY] [DLA 3765-1] cacti security update
2024-03-18 18:26:19
osv
osv
cacti - security update
2023-11-08 00:00:00
cacti - security update
2024-03-18 00:00:00
CVE-2023-39511
2023-09-06 18:15:08
amazon
amazon
Important: cacti
2023-10-12 15:48:00
Important: cacti
2023-09-27 22:15:00
nvd
nvd
CVE-2023-39512
2023-09-05 21:15:47
CVE-2023-39511
2023-09-06 18:15:08
CVE-2023-31132
2023-09-05 22:15:08
cve
cve
CVE-2023-39510
2023-09-05 21:15:47
CVE-2023-39514
2023-09-05 21:15:47
CVE-2023-39512
2023-09-05 21:15:47
ubuntucve
ubuntucve
CVE-2023-39513
2023-09-05 00:00:00
CVE-2023-39514
2023-09-05 00:00:00
CVE-2023-39366
2023-09-05 00:00:00
cvelist
cvelist
CVE-2023-39511 Stored Cross-Site-Scripting on reports_admin.php device name in Cacti
2023-09-06 17:40:13
CVE-2023-39516 Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti
2023-09-05 21:09:28
CVE-2023-39513 Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti
2023-09-05 20:15:25
prion
prion
Cross site scripting
2023-09-05 21:15:00
Cross site scripting
2023-09-06 18:15:00
Cross site scripting
2023-09-05 21:15:00
debiancve
debiancve
CVE-2023-39511
2023-09-06 18:15:08
CVE-2023-39361
2023-09-05 21:15:46
CVE-2023-39512
2023-09-05 21:15:47
alpinelinux
alpinelinux
CVE-2023-39511
2023-09-06 18:15:08
CVE-2023-39512
2023-09-05 21:15:47
CVE-2023-39358
2023-09-05 22:15:08
veracode
veracode
Cross-site Scripting (XSS)
2023-09-12 15:35:30
SQL Injection
2023-09-12 22:31:33
Open Redirect
2023-09-12 22:32:10
ubuntu
ubuntu
Cacti vulnerability
2024-04-02 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Cacti
2024-02-28 16:07:37
zdt
zdt
Cacti 1.2.24 - Authenticated command injection when using SNMP options Vulnerability
2023-10-09 00:00:00
packetstorm
packetstorm
Cacti 1.2.24 Command Injection
2023-10-10 00:00:00
nuclei
nuclei
Cacti 1.2.24 - SQL Injection
2023-09-06 11:39:51
Cacti < 1.2.25 Insecure Deserialization
2023-09-13 19:10:39
zdi
zdi
Cacti graph_view SQL Injection Authentication Bypass Vulnerability
2023-10-04 00:00:00
Cacti link Local File Inclusion Remote Code Execution Vulnerability
2023-10-04 00:00:00
vulnrichment
vulnrichment
CVE-2023-39365 Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti
2023-09-05 21:03:56

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.521 Medium

EPSS

Percentile

97.6%

JSON
Related for FEDORA:7F0722101FF1
openvas10nessus10fedora5debian2osv20amazon2nvd17cve18ubuntucve18cvelist18prion18debiancve18alpinelinux17veracode17ubuntu1githubexploit1zdt1packetstorm1nuclei2zdi2vulnrichment1