Known vulnerabilities in Cacti - page 3

Software: Cacti
Software CPE: cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*
Total vulnerabilities: 120
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cacti Cacti is affected by 120 known vulnerabilities: 1 critical, 16 high, 38 medium, 65 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49086
CWE-79 Low
No
No
1.2.26 27.12.2023 SB2023122735
SB2024060305
SB2024060306
and 2 more
#VU84817 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-49085
CWE-89 Medium
Available
No
1.2.26 27.12.2023 SB2023122735
SB2024060305
SB2024060306
and 2 more
#VU84816 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-49084
CWE-98 Medium
Available
No
1.2.26 27.12.2023 SB2023122735
SB2024060305
SB2024060306
and 2 more
#VU84815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50250
CWE-79 Low
No
No
1.2.26 27.12.2023 SB2023122735
SB2024060305
SB2024060306
and 2 more
#VU84814 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-51448
CWE-89 Medium
No
No
1.2.26 27.12.2023 SB2023122735
SB2024020604
SB2024060305
and 3 more
#VU80440 - Deserialization of Untrusted Data
CVE-2023-30534
CWE-502 Medium
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39515
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80436 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39514
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80435 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39513
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80434 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39512
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80433 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39365
CWE-89 Medium
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80432 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39510
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39366
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80429 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-39362
CWE-78 Medium
Available
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80428 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39359
CWE-89 Medium
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80427 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39358
CWE-89 Medium
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80426 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-39364
CWE-601 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80425 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39357
CWE-89 Medium
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80424 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39361
CWE-89 High
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80423 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39360
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more


Showing elements 41 - 60 out of 120