CVE-2022-0507

HIGH 8.8CVE-2022-0507 · Published 10/03/2022 · updated 17/06/2026

In short

CVE-2022-0507 is a HIGH (CVSS 8.8) vulnerability affecting pandora fms (pandorafms).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.1% of all vulnerabilities.
Fix: update to 760 or later.

Package	Affected versions	Patched versions
pandora fms pandorafms	`< 760`	`760`

Description

Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.

References

khoori.org/posts/cve-2022-0507
pandorafms.com/en/security/common-vulnerabilities-and-exposures
incibe.es/en/cve-assignment-publication/coordinated-cves

More vulnerabilities in pandora fms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pandora fms

pandorafms

< 760

760

More vulnerabilities in pandora fms

See all →