Lucene search

K
cvelistARTICACVELIST:CVE-2021-46677
HistoryAug 05, 2022 - 3:26 p.m.

CVE-2021-46677 Vulnerability XSS in Event filter name field

2022-08-0515:26:09
CWE-79
ARTICA
www.cve.org
4
cve-2021-46677
vulnerability
xss
pandora fms
event filter

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

33.4%

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field.

CNA Affected

[
  {
    "platforms": [
      "all"
    ],
    "product": "Pandora FMS",
    "vendor": "Artica PFMS",
    "versions": [
      {
        "lessThanOrEqual": "v756",
        "status": "affected",
        "version": "v756",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

33.4%

Related for CVELIST:CVE-2021-46677