CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
79.3%
The Cacti Group, Inc. reports:
Important Security Fixes
Multiple XSS and SQL injection vulnerabilities
Changelog
bug: Fixed SQL injection VN: JVN#78187936 /
TN:JPCERT#98968540
bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting
Vulnerability Notification
bug#0002571: SQL Injection and Location header injection from
cdef id CVE-2015-4342
bug#0002572: SQL injection in graph template