What’s Vulnerable › Products

Artica PFMS Pandora FMS vulnerabilities

48 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Artica PFMS Pandora FMS version is affected

Latest Artica PFMS Pandora FMS vulnerabilities

• CVE-2014-125124 — Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection (CVSS 10.0)
• CVE-2014-125115 — Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE (CVSS 10.0)
• CVE-2025-34088 — Pandora FMS Authenticated Remote Code Execution via Ping Module (CVSS 8.8)
• CVE-2024-11320 — Command Injection leading to RCE via LDAP Misconfiguration (CVSS 9.8)
• CVE-2024-9987 — SQL Injection in CSV Module Data Collection (CVSS 8.8)
• CVE-2024-35308 — Post-auth Arbitrary File Read in the Server Plugins Section (CVSS 8.8)
• CVE-2023-44089 — XSS in Visual Console (CVSS 6.1)
• CVE-2023-44088 — SQL Injection in Visual Console (CVSS 8.8)
• CVE-2023-41815 — XSS in File manager (CVSS 6.1)
• CVE-2023-41814 — XSS Vulnerability Messages (CVSS 6.1)
• CVE-2023-41813 — User notification settings edition (CVSS 6.1)
• CVE-2023-24518 — Disabling the administrator's account through cross-site request forgery (CVSS 7.1)
• CVE-2023-0828 — Stored Cross Site Scripting in syslog section (CVSS 6.1)
• CVE-2023-24517 — Remote Code Execution via Unrestricted File Upload (CVSS 7.2)
• CVE-2023-24516 — Stored Cross Site Scripting - Special Days Module (CVSS 5.4)
• CVE-2023-24515 — Server side request forgery in api checker (CVSS 6.5)
• CVE-2023-24514 — Stored Cross Site Scripting Vulnerability in Visual Console Module (CVSS 6.1)
• CVE-2023-2807 — Authentication bypass in password reset process (CVSS 9.8)
• CVE-2022-47373 — Reflected Cross Site Scripting in Search Functionality of Module Library (CVSS 6.1)
• CVE-2022-47372 — Stored cross-site scripting vulnerability in create event section (CVSS 5.4)
• CVE-2022-45437 — Stored cross-site scripting vulnerability in the reporting dashboard module (CVSS 4.8)
• CVE-2022-45436 — Stored cross-site scripting vulnerability in network maps editor feature (CVSS 4.8)
• CVE-2022-43980 — Cross-site scripting vulnerability in the network maps edit functionality (CVSS 5.4)
• CVE-2022-43979 — Path Traversal leading to Local File Inclusion (CVSS 9.8)
• CVE-2022-43978 — Limited Authentication bypass due to hardcoded secret (CVSS 3.7)