CVE-2017-15936

Artica Pandora FMS 7.0 contains a Cross‑Site Scripting vulnerability. An attacker with write permission can create an agent carrying an XSS payload, which executes when a user visits the agent definitions page. The underlying root cause is not specified in the provided documents. The exact affect...

CVE-2017-15936: Improper Neutralization of Input During Web Page Generation

In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed...

PT-2017-14295

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows an attacker with write permission to create an agent containing an XSS payload. When a user accesses the agent definitions page, the malicious script is executed. Recommendations For...