AArtica PFMS

Products

Exploited and recent CVEs

• CVE-2023-0828 Medium 6.7 Stored Cross Site Scripting in syslog section 0.3%
• CVE-2023-24518 Medium 6.7 Disabling the administrator's account through cross-site request forgery 0.2%
• CVE-2023-24517 Medium 6.4 Remote Code Execution via Unrestricted File Upload 1.0%
• CVE-2023-24516 Medium 5.9 Stored Cross Site Scripting - Special Days Module 0.4%
• CVE-2023-24514 Medium 6.3 Stored Cross Site Scripting Vulnerability in Visual Console Module 0.4%
• CVE-2023-24515 Medium 5.2 Server side request forgery in api checker 0.4%
• CVE-2023-2807 Medium 6.4 Authentication bypass in password reset process 0.6%
• CVE-2022-45437 Medium 6.5 Stored cross-site scripting vulnerability in the reporting dashboard module 0.4%
• CVE-2022-47373 Medium 6.4 Reflected Cross Site Scripting in Search Functionality of Module Library 0.3%
• CVE-2022-47372 High 7.6 Stored cross-site scripting vulnerability in create event section 0.2%
• CVE-2022-45436 Medium 6.1 Stored cross-site scripting vulnerability in network maps editor feature 0.6%
• CVE-2022-43979 Medium 5.9 Path Traversal leading to Local File Inclusion 0.8%
• CVE-2022-43978 Medium 5.6 Limited Authentication bypass due to hardcoded secret 0.3%
• CVE-2022-43980 Medium 5.2 Cross-site scripting vulnerability in the network maps edit functionality 0.3%
• CVE-2021-46678 Medium 4.0 Vulnerability XSS in service form name field 0.4%
• CVE-2021-46680 Medium 4.0 Vulnerability XSS in module form name field 0.4%
• CVE-2021-46677 Medium 4.0 Vulnerability XSS in Event filter name field 0.4%
• CVE-2021-46676 Medium 4.0 Vulnerability XSS in Transaction Map name field 0.4%
• CVE-2021-46679 Medium 4.0 Vulnerability XSS in service elements 0.4%
• CVE-2021-46681 Medium 4.0 Vulnerability XSS in module mass operation name field 0.4%
• CVE-2022-26310 High 7.3 Improper Authorization in User Management to Vertical Privilege Escalation 0.7%
• CVE-2022-26309 Low 3.7 Cross-Site Request en Bulk operation (User operation) 0.3%
• CVE-2022-26308 Low 3.7 Improper Access Control in Configuration (Credential store) 0.4%
• CVE-2022-1648 Medium 5.7 Relative Path Traversal to Remote Code Execution in File Manager 1.4%
• CVE-2022-2059 Low 3.5 Stored Cross Site-Scripting in Agent Manager 0.4%
• CVE-2022-2032 Low 3.5 Stored Cross Site-Scripting in File Manager 0.4%
• CVE-2022-0507 Medium 5.8 Vulnerability: Authenticated SQL Injection in API 1.2%