Cacti Security Vulnerabilities and Issues — Cacti CVE List

Lucene search

CactiCacti

4 matches found

CVE•added 2019/01/16 4:29 p.m.•139 views

CVE-2018-20723

A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color.

4.8CVSS5.8AI score0.00526EPSS

CVE•added 2019/01/16 4:29 p.m.•138 views

CVE-2018-20724

A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors.

4.8CVSS5.8AI score0.00618EPSS

CVE•added 2019/01/16 4:29 p.m.•136 views

CVE-2018-20725

A cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label.

4.8CVSS5.8AI score0.00526EPSS

CVE•added 2019/01/16 4:29 p.m.•131 views

CVE-2018-20726

A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.

5.4CVSS6.1AI score0.00541EPSS