Vulnerabilities > Ganglia > Ganglia WEB > 2.1.2

DATE CVE VULNERABILITY TITLE RISK
2020-01-11 CVE-2019-20379 Cross-site Scripting vulnerability in Ganglia Ganglia-Web
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.
network
ganglia CWE-79
4.3
2020-01-11 CVE-2019-20378 Cross-site Scripting vulnerability in Ganglia Ganglia-Web
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
network
ganglia CWE-79
4.3
2017-08-09 CVE-2015-6816 Improper Authentication vulnerability in multiple products
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
network
low complexity
fedoraproject ganglia CWE-287
7.5
2013-03-14 CVE-2013-0275 Cross-Site Scripting vulnerability in Ganglia Ganglia-Web
Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
ganglia CWE-79
4.3
2012-08-06 CVE-2012-3448 PHP Code Execution vulnerability in Ganglia
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
network
low complexity
ganglia
7.5