Known vulnerabilities in Cacti - page 4

Software: Cacti
Software CPE: cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*
Total vulnerabilities: 120
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cacti Cacti is affected by 120 known vulnerabilities: 1 critical, 16 high, 38 medium, 65 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80508 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39511
CWE-79 Low
No
No
1.2.25 06.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80439 - Incorrect Default Permissions
CVE-2023-31132
CWE-276 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80438 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39516
CWE-79 Low
No
No
1.2.25 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU70426 - Improper Authorization
CVE-2022-46169
CWE-285 Critical
Available
Exploited
1.2.23 19.12.2022 SB2022121926
SB2022121931
SB2023012480
and 6 more
#VU67763 - Improper Authentication
CVE-2022-0730
CWE-287 High
No
No
1.2.20 29.09.2022 SB2022092972
SB2022092973
SB2022121931
and 5 more
#VU54527 - Session Fixation
CWE-384 Low
No
No
1.2.18 05.07.2021 SB2021070503
#VU54526 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.2.18 05.07.2021 SB2021070503
#VU54525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14424
CWE-79 Low
No
No
1.2.18 05.07.2021 SB2021070503
SB2021110234
SB2021110235
and 3 more
#VU52849 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.2.17 04.05.2021 SB2021050414
#VU52848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.2.17 04.05.2021 SB2021050414
#VU50050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-35701
CWE-89 Medium
No
No
1.2.17 11.01.2021 SB2021012717
SB2021012718
SB2021051038
and 3 more
#VU31878 -
CVE-2020-13230
Medium
No
No
1.2.11 26.07.2020 SB2020052036
SB2020052739
SB2020052740
and 2 more
#VU31877 - Cross-Site Request Forgery (CSRF)
CVE-2020-13231
CWE-352 Medium
No
No
1.2.11 26.07.2020 SB2020052036
SB2020052739
SB2020052740
and 2 more
#VU31876 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.2.13 26.07.2020 SB1970010101
#VU31875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.2.13 26.07.2020 SB1970010101
#VU31874 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-14295
CWE-89 Medium
Available
No
1.2.13 26.07.2020 SB2020072602
SB2020072603
SB1970010101
and 7 more
#VU29531 - Improper input validation
CVE-2020-13625
CWE-20 Low
No
No
1.2.13 06.07.2020 SB2020070602
SB2020072602
SB2020072603
and 10 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
1.2.13 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
1.2.13 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
1.2.11 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 61 - 80 out of 120