Ubuntu.comUB:CVE-2022-45437CVE-2022-45437
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS
Percentile
21.0%
Improper Neutralization of Input During Web Page Generation (‘Cross-site
Scripting’) vulnerability in Artica PFMS Pandora FMS v765 on all allows
Cross-Site Scripting (XSS). A user with edition privileges can create a
Payload in the reporting dashboard module. An admin user can observe the
Payload without interaction and attacker can get information.
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS
Percentile
21.0%