CVE-2022-45437

MEDIUM 4.8CVE-2022-45437 · Published 15/02/2023 · updated 17/06/2026

In short

CVE-2022-45437 is a MEDIUM (CVSS 4.8) vulnerability affecting pandora fms (pandorafms).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 36.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pandora fms pandorafms	`= 765`	No fix yet

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting (XSS). A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload without interaction and attacker can get information.

References

More vulnerabilities in pandora fms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pandora fms

pandorafms

= 765

No fix yet

Description

More vulnerabilities in pandora fms

See all →