Cacti Cacti

• CVE-2023-39511 Medium 6.1 Stored Cross-Site-Scripting on reports_admin.php device name in Cacti 0.8%
• CVE-2023-30534 Medium 4.3 Insecure Deserialization in Cacti 2.9%
• CVE-2023-31132 High 7.8 Cacti Privilege Escalation 0.4%
• CVE-2023-39362 High 7.2 Authenticated command injection in SNMP options of a Device 85.4%
• CVE-2023-39364 Low 3.5 Open redirect in change password functionality in Cacti 0.7%
• CVE-2023-39516 Medium 6.1 Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti 0.8%
• CVE-2023-39365 Medium 4.6 Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti 0.9%
• CVE-2023-39357 High 8.8 A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti 1.8%
• CVE-2023-39358 High 8.8 Authenticated SQL injection vulnerability in reports_user.php in Cacti 2.0%
• CVE-2023-39359 High 8.8 Authenticated SQL injection vulnerability in graphs.php in Cacti 2.1%
• CVE-2023-39361 Critical 9.8 Unauthenticated SQL Injection in graph_view.php in Cacti 88.8%
• CVE-2023-39360 Medium 6.1 Reflected Cross-site Scripting in graphs_new.php in Cacti 0.9%
• CVE-2023-39366 Medium 6.1 Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti 0.9%
• CVE-2023-39510 Medium 6.1 Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti 0.8%
• CVE-2023-39512 Medium 6.1 Stored Cross-site Scripting on data_sources.php device name view in Cacti 0.8%
• CVE-2023-39513 Medium 6.1 Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti 0.9%
• CVE-2023-39515 Medium 6.1 Stored Cross-site Scripting on data_debug.php datasource path view in Cacti 0.8%
• CVE-2023-39514 Medium 6.1 Stored Cross-site Scripting on graphs.php data template formated name view in Cacti 0.9%