Lucene search
HistoryAug 05, 2022 - 4:15 p.m.
CVE-2021-46677
xss vulnerability
pandora fms
javascript execution
event filter
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.4%
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field.
Affected configurations
Node
pandorafmspandora_fmsRange<757
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pandorafms | pandora_fms | * | cpe:2.3:a:pandorafms:pandora_fms:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2021-46677 Vulnerability XSS in Event filter name field
2022-08-05 15:26:09
prion
prion
Cross site scripting
2022-08-05 16:15:00
cve
cve
CVE-2021-46677
2022-08-05 16:15:11
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.4%
Related for NVD:CVE-2021-46677