FreeBSDA3929112-181B-11E5-A1CF-002590263BF5cacti -- Multiple XSS and SQL injection vulnerabilities
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.9%
The Cacti Group, Inc. reports:
Important Security Fixes
Multiple XSS and SQL injection vulnerabilities
Changelog
bug: Fixed SQL injection VN: JVN#78187936 /
TN:JPCERT#98968540
bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting
Vulnerability Notification
bug#0002571: SQL Injection and Location header injection from
cdef id CVE-2015-4342
bug#0002572: SQL injection in graph template
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.9%