Vulnerabilities > Artica > Pandora FMS > Low

DATE CVE VULNERABILITY TITLE RISK
2021-11-03 CVE-2021-36698 Cross-site Scripting vulnerability in Artica Pandora FMS
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.
network
artica CWE-79
3.5
2017-10-27 CVE-2017-15934 Cross-site Scripting vulnerability in Artica Pandora FMS 7.0
Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter.
network
artica CWE-79
3.5
2017-10-27 CVE-2017-15936 Cross-site Scripting vulnerability in Artica Pandora FMS 7.0
In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed.
network
artica CWE-79
3.5