CVE-2022-31358

CVE-2022-31358 is a reflected XSS in Proxmox Virtual Environment before v7.2-3. The issue allows remote attackers to execute arbitrary web scripts/HTML by accessing non-existent endpoints under /api2/html/. Affected software: Proxmox VE versions prior to 7.2-3. Root cause/impact: reflected XSS wi...

CVE-2014-4156

Proxmox VE prior to 3.2 has a User Enumeration vulnerability in AccessControl.pm . The issue is described across sources (NVD, RH, CVE registries) as a vulnerability affecting Proxmox VE before version 3.2, named “AccessControl.pm User Enumeration Vulnerability.” Public references note a moderate...