Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202007-03
HistoryJul 26, 2020 - 12:00 a.m.

Cacti: Multiple vulnerabilities

2020-07-2600:00:00
Gentoo Foundation
security.gentoo.org
40

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.302 Low

EPSS

Percentile

96.9%

JSON

Background

Cacti is a complete frontend to rrdtool.

Description

Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Cacti users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-analyzer/cacti-1.2.13"

All Cacti Spine users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-analyzer/cacti-spine-1.2.13"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-analyzer/cacti< 1.2.13UNKNOWN
Gentooanyallnet-analyzer/cacti-spine< 1.2.13UNKNOWN

Related

nessus 42
suse 3
openvas 22
fedora 8
freebsd 1
ibm 33
osv 13
attackerkb 3
githubexploit 5
atlassian 5
hp 1
joomla 1
oraclelinux 4
debian 2
checkpoint_advisories 3
drupal 1
redhat 8
typo3 1
altlinux 1
prion 3
zdt 4
github 4
veracode 3
packetstorm 4
ubuntucve 3
alpinelinux 3
cve 3
debiancve 3
nodejs 1
amazon 1
f5 2
hackerone 1
redhatcve 2
almalinux 1
ics 1
exploitdb 1
rocky 1
rapid7blog 1
nessus
nessus
GLSA-202007-03 : Cacti: Multiple vulnerabilities
2020-07-27 00:00:00
FreeBSD : Cacti -- multiple vulnerabilities (cd2dc126-cfe4-11ea-9172-4c72b94353b5)
2020-07-30 00:00:00
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-1060)
2020-07-27 00:00:00
suse
suse
Security update for cacti, cacti-spine (moderate)
2020-07-25 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-28 00:00:00
Security update for otrs (moderate)
2020-11-10 00:00:00
openvas
openvas
Fedora: Security Advisory for cacti (FEDORA-2020-8a15713da2)
2020-07-24 00:00:00
Fedora: Security Advisory for cacti (FEDORA-2020-7dddce530c)
2020-07-24 00:00:00
Cacti <= 1.2.12 Multiple Vulnerabilities - Windows
2020-06-18 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: cacti-1.2.13-1.fc31
2020-07-23 01:17:57
[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32
2020-07-23 01:06:59
[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32
2020-06-16 01:32:24
freebsd
freebsd
Cacti -- multiple vulnerabilities
2020-07-15 00:00:00
ibm
ibm
Security Bulletin: IBM Tivoli Netcool Impact is affected by jQuery vulnerabilities (CVE-2020-11022, CVE-2020-11023)
2020-06-29 15:31:22
Security Bulletin: Steps to update DataQuant Wrokstation ans DataQuant WebSphere plugins.
2020-10-07 21:15:08
Security Bulletin: IBM Aspera Webapps are vulnerable to cross-site scripting (CVE-2020-11022, CVE-2020-11023).
2021-09-17 18:19:25
osv
osv
jquery - security update
2021-03-25 00:00:00
drupal7 - security update
2020-05-26 00:00:00
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
attackerkb
attackerkb
CVE-2020-11022
2020-04-29 00:00:00
CVE-2020-11023
2020-04-29 00:00:00
CVE-2020-14295
2020-06-17 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Jquery
2021-10-16 01:10:33
Exploit for SQL Injection in Cacti
2021-05-28 16:40:49
Exploit for SQL Injection in Cacti
2021-04-28 20:57:00
atlassian
atlassian
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
jquery 2.2.4 XSS vulnerability
2022-08-24 14:53:45
hp
hp
HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
joomla
joomla
[20200604] - Core - XSS in jQuery.htmlPrefilter
2020-04-10 00:00:00
oraclelinux
oraclelinux
jquery-ui security update
2022-03-01 00:00:00
ipa security and bug fix update
2021-03-19 00:00:00
bootstrap security update
2021-08-09 00:00:00
debian
debian
[SECURITY] [DLA 2608-1] jquery security update
2021-03-26 01:32:22
[SECURITY] [DSA 4693-1] drupal7 security update
2020-05-26 21:08:21
checkpoint_advisories
checkpoint_advisories
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
2020-11-16 00:00:00
Cacti SQL Injection (CVE-2020-14295)
2021-05-23 00:00:00
Cacti color.php SQL Injection (CVE-2020-14295)
2020-09-21 00:00:00
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
2020-05-20 00:00:00
redhat
redhat
(RHSA-2020:4211) Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update
2020-10-08 06:44:00
(RHSA-2020:3807) Moderate: Red Hat Virtualization security, bug fix, and enhancement update
2020-09-23 15:54:23
(RHSA-2021:0860) Moderate: ipa security and bug fix update
2021-03-16 10:27:14
typo3
typo3
Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)
2020-07-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
prion
prion
Sql injection
2020-06-17 14:15:00
Code injection
2020-04-29 21:15:00
Code injection
2020-04-29 22:15:00
zdt
zdt
Cacti 1.2.12 SQL Injection / Remote Command Execution Exploit
2021-06-02 00:00:00
Cacti 1.2.12 - (filter) SQL Injection / Remote Code Execution Exploit
2021-04-29 00:00:00
jQuery 1.0.3 - Cross-Site Scripting Vulnerability
2021-04-14 00:00:00
github
github
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
Potential XSS vulnerability in jQuery
2020-04-29 22:19:14
Use of insecure jQuery version in OctoberCMS
2020-06-05 19:37:49
veracode
veracode
Remote Code Execution (RCE)
2021-04-29 12:16:07
Cross-Site Scripting (XSS)
2020-04-30 01:59:55
Cross-Site Scripting (XSS)
2020-04-30 02:21:22
packetstorm
packetstorm
Cacti 1.2.12 SQL Injection / Remote Code Execution
2021-04-29 00:00:00
Cacti 1.2.12 SQL Injection / Remote Command Execution
2021-06-02 00:00:00
jQuery 1.2 Cross Site Scripting
2021-04-14 00:00:00
ubuntucve
ubuntucve
CVE-2020-14295
2020-06-17 00:00:00
CVE-2020-11022
2020-04-29 00:00:00
CVE-2020-11023
2020-04-29 00:00:00
alpinelinux
alpinelinux
CVE-2020-14295
2020-06-17 14:15:00
CVE-2020-11022
2020-04-29 22:15:00
CVE-2020-11023
2020-04-29 21:15:00
cve
cve
CVE-2020-14295
2020-06-17 14:15:00
CVE-2020-11022
2020-04-29 22:15:00
CVE-2020-11023
2020-04-29 21:15:00
debiancve
debiancve
CVE-2020-14295
2020-06-17 14:15:00
CVE-2020-11022
2020-04-29 22:15:00
CVE-2020-11023
2020-04-29 21:15:00
nodejs
nodejs
Cross-Site Scripting
2020-04-30 18:19:09
amazon
amazon
Medium: ipa
2021-04-20 17:55:00
f5
f5
K02453220 : jQuery vulnerability CVE-2020-11022
2020-08-03 00:00:00
K66544153 : jQuery vulnerability CVE-2020-11023
2020-08-03 00:00:00
hackerone
hackerone
Reddit: CVE-2020-11022
2022-12-20 17:19:58
redhatcve
redhatcve
CVE-2020-11022
2020-04-29 23:09:52
CVE-2020-11023
2021-06-20 07:11:02
almalinux
almalinux
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
ics
ics
Sensormatic Electronics VideoEdge
2021-11-02 12:00:00
exploitdb
exploitdb
Cacti 1.2.12 - &#039;filter&#039; SQL Injection
2021-04-29 00:00:00
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-06-04 19:11:19

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.302 Low

EPSS

Percentile

96.9%

JSON
Related for GLSA-202007-03
nessus42suse3openvas22fedora8freebsd1ibm33osv13attackerkb3githubexploit5atlassian5hp1joomla1oraclelinux4debian2checkpoint_advisories3drupal1redhat8typo31altlinux1prion3zdt4github4veracode3packetstorm4ubuntucve3alpinelinux3cve3debiancve3nodejs1amazon1f52hackerone1redhatcve2almalinux1ics1exploitdb1rocky1rapid7blog1