What’s Vulnerable › Vulnerabilities

CVE-2019-19968

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-02-04 · updated 2026-06-17
• Weakness: CWE-79

Description

PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content.

Affected products

• Artica PFMS Pandora FMS: 742

References

• https://k4m1ll0.com/cve-2019-19968.html
• https://pandorafms.com
• https://k4m1ll0.com/cve-2019-19968.html
• https://pandorafms.com

Get alerted when CVE-2019-19968 or the next vulnerability affects your stack