Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDCD2DC126-CFE4-11EA-9172-4C72B94353B5
HistoryJul 15, 2020 - 12:00 a.m.

Cacti -- multiple vulnerabilities

2020-07-1500:00:00
vuxml.freebsd.org
38

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.302 Low

EPSS

Percentile

96.9%

JSON

Cacti developers reports:

Multiple fixes for bundled jQuery to prevent
code exec (CVE-2020-11022, CVE-2020-11023).
PHPMail contains a escaping bug
(CVE-2020-13625).
SQL Injection via color.php in Cacti
(CVE-2020-14295).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchcacti< 1.2.13UNKNOWN

Related

fedora 12
nessus 46
suse 3
gentoo 1
ibm 32
debian 4
atlassian 5
oraclelinux 3
checkpoint_advisories 3
openvas 16
attackerkb 3
osv 15
githubexploit 5
hp 1
joomla 1
drupal 1
typo3 1
redhat 5
altlinux 1
cve 4
prion 4
veracode 3
github 3
zdt 4
ubuntu 1
debiancve 4
alpinelinux 3
mageia 1
ubuntucve 4
packetstorm 3
f5 1
nodejs 1
ics 1
almalinux 1
redhatcve 2
amazon 1
fedora
fedora
[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32
2020-07-23 01:06:59
[SECURITY] Fedora 31 Update: cacti-1.2.13-1.fc31
2020-07-23 01:17:57
[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32
2020-06-16 01:32:24
nessus
nessus
FreeBSD : Cacti -- multiple vulnerabilities (cd2dc126-cfe4-11ea-9172-4c72b94353b5)
2020-07-30 00:00:00
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-1060)
2020-07-27 00:00:00
GLSA-202007-03 : Cacti: Multiple vulnerabilities
2020-07-27 00:00:00
suse
suse
Security update for cacti, cacti-spine (moderate)
2020-07-25 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-28 00:00:00
Security update for otrs (moderate)
2020-11-10 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2020-07-26 00:00:00
ibm
ibm
Security Bulletin: jQuery Vulnerabilities Affect IBM Emptoris Contract Management (CVE-2020-11023, CVE-2020-11022)
2020-12-03 09:52:58
Security Bulletin: jQuery Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform (CVE-2020-11023, CVE-2020-11022)
2020-12-03 09:51:39
Security Bulletin: IBM Security Verify Information Queue uses a Node.js package with known vulnerabilities (CVE-2020-11023, CVE-2020-11022)
2021-02-10 17:05:43
debian
debian
[SECURITY] [DSA 4693-1] drupal7 security update
2020-05-26 21:08:21
[SECURITY] [DLA 2608-1] jquery security update
2021-03-26 01:32:22
[SECURITY] [DLA 2306-1] libphp-phpmailer security update
2020-08-02 04:39:28
atlassian
atlassian
jquery 2.2.4 XSS vulnerability
2022-08-24 14:53:45
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
oraclelinux
oraclelinux
jquery-ui security update
2022-03-01 00:00:00
ipa security and bug fix update
2021-03-19 00:00:00
bootstrap security update
2021-08-09 00:00:00
checkpoint_advisories
checkpoint_advisories
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
2020-11-16 00:00:00
Cacti SQL Injection (CVE-2020-14295)
2021-05-23 00:00:00
Cacti color.php SQL Injection (CVE-2020-14295)
2020-09-21 00:00:00
openvas
openvas
Drupal 7.x, 8.x jQuery XSS Vulnerabilities (SA-CORE-2020-002) (Linux)
2020-06-19 00:00:00
Fedora: Security Advisory for drupal8 (FEDORA-2020-36d2db5f51)
2020-06-23 00:00:00
Discourse < 2.5.0.beta5 Multiple Vulnerabilities
2020-05-28 00:00:00
attackerkb
attackerkb
CVE-2020-11022
2020-04-29 00:00:00
CVE-2020-11023
2020-04-29 00:00:00
CVE-2020-14295
2020-06-17 00:00:00
osv
osv
jquery - security update
2021-03-25 00:00:00
drupal7 - security update
2020-05-26 00:00:00
CVE-2020-13625
2020-06-08 17:15:10
githubexploit
githubexploit
Exploit for Cross-site Scripting in Jquery
2021-10-16 01:10:33
Exploit for SQL Injection in Cacti
2021-05-28 16:40:49
Exploit for SQL Injection in Cacti
2021-04-28 20:57:00
hp
hp
HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
joomla
joomla
[20200604] - Core - XSS in jQuery.htmlPrefilter
2020-04-10 00:00:00
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
2020-05-20 00:00:00
typo3
typo3
Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)
2020-07-29 00:00:00
redhat
redhat
(RHSA-2020:4211) Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update
2020-10-08 06:44:00
(RHSA-2020:3807) Moderate: Red Hat Virtualization security, bug fix, and enhancement update
2020-09-23 15:54:23
(RHSA-2020:2217) Moderate: OpenShift Container Platform 3.11 security update
2020-05-28 11:08:25
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
cve
cve
CVE-2020-13625
2020-06-08 17:15:00
CVE-2020-14295
2020-06-17 14:15:00
CVE-2020-11022
2020-04-29 22:15:00
prion
prion
Sql injection
2020-06-17 14:15:00
Double free
2020-06-08 17:15:00
Code injection
2020-04-29 22:15:00
veracode
veracode
Access Control Bypass
2020-05-28 01:26:56
Remote Code Execution (RCE)
2021-04-29 12:16:07
Cross-Site Scripting (XSS)
2020-04-30 01:59:55
github
github
Insufficient output escaping of attachment names in PHPMailer
2020-05-27 16:37:02
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
Potential XSS vulnerability in jQuery
2020-04-29 22:19:14
zdt
zdt
Cacti 1.2.12 SQL Injection / Remote Command Execution Exploit
2021-06-02 00:00:00
Cacti 1.2.12 - (filter) SQL Injection / Remote Code Execution Exploit
2021-04-29 00:00:00
jQuery 1.2 - Cross-Site Scripting Vulnerability
2021-04-14 00:00:00
ubuntu
ubuntu
PHPMailer vulnerability
2020-09-16 00:00:00
debiancve
debiancve
CVE-2020-14295
2020-06-17 14:15:00
CVE-2020-13625
2020-06-08 17:15:00
CVE-2020-11022
2020-04-29 22:15:00
alpinelinux
alpinelinux
CVE-2020-13625
2020-06-08 17:15:00
CVE-2020-14295
2020-06-17 14:15:00
CVE-2020-11023
2020-04-29 21:15:00
mageia
mageia
Updated php-phpmailer packages fix security vulnerability
2020-08-01 12:25:19
ubuntucve
ubuntucve
CVE-2020-13625
2020-06-08 00:00:00
CVE-2020-14295
2020-06-17 00:00:00
CVE-2020-11022
2020-04-29 00:00:00
packetstorm
packetstorm
Cacti 1.2.12 SQL Injection / Remote Code Execution
2021-04-29 00:00:00
Cacti 1.2.12 SQL Injection / Remote Command Execution
2021-06-02 00:00:00
jQuery 1.2 Cross Site Scripting
2021-04-14 00:00:00
f5
f5
K02453220 : jQuery vulnerability CVE-2020-11022
2020-08-03 00:00:00
nodejs
nodejs
Cross-Site Scripting
2020-04-30 18:19:09
ics
ics
Sensormatic Electronics VideoEdge
2021-11-02 12:00:00
almalinux
almalinux
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
redhatcve
redhatcve
CVE-2020-11022
2020-04-29 23:09:52
CVE-2020-11023
2021-06-20 07:11:02
amazon
amazon
Medium: ipa
2021-04-20 17:55:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.302 Low

EPSS

Percentile

96.9%

JSON
Related for CD2DC126-CFE4-11EA-9172-4C72B94353B5
fedora12nessus46suse3gentoo1ibm32debian4atlassian5oraclelinux3checkpoint_advisories3openvas16attackerkb3osv15githubexploit5hp1joomla1drupal1typo31redhat5altlinux1cve4prion4veracode3github3zdt4ubuntu1debiancve4alpinelinux3mageia1ubuntucve4packetstorm3f51nodejs1ics1almalinux1redhatcve2amazon1