Known vulnerabilities in Cacti - page 5

Software: Cacti
Software CPE: cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*
Total vulnerabilities: 120
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cacti Cacti is affected by 120 known vulnerabilities: 1 critical, 16 high, 38 medium, 65 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25543 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-8813
CWE-78 High
Available
No
1.2.9 24.02.2020 SB2020022410
SB2020050102
SB2020031332
and 8 more
#VU24394 - Improper input validation
CVE-2020-7237
CWE-20 High
No
No
- 20.01.2020 SB2020011616
SB2020031923
SB2020031331
and 9 more
#VU24356 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7106
CWE-79 Low
No
No
- 16.01.2020 SB2020011616
SB2020031923
SB2020051147
and 11 more
#VU23620 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-17357
CWE-89 Medium
No
No
1.2.8 16.12.2019 SB2019121614
SB2020012104
SB2020031923
and 7 more
#VU23619 - Deserialization of Untrusted Data
CVE-2019-17358
CWE-502 High
No
No
1.2.8 16.12.2019 SB2019121614
SB2020012104
SB2020031923
and 8 more
#VU21304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11025
CWE-79 Low
No
No
1.2.3 24.09.2019 SB2019040916
SB2019033103
#VU21303 - Improper Access Control
CVE-2019-16723
CWE-284 Medium
No
No
- 24.09.2019 SB2019092410
SB2020012104
SB2020031923
and 9 more
#VU36232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20723
CWE-79 Low
No
No
1.2.0 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20724
CWE-79 Low
No
No
1.2.0 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36234 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20725
CWE-79 Low
No
No
1.2.0 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36235 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20726
CWE-79 Low
No
No
1.2.0 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU11516 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 03.04.2018 SB2018030715
SB2024072623
#VU9571 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-16641
CWE-78 High
No
No
- 07.12.2017 SB2017111504
SB2017112305
SB2017111909
and 3 more
#VU9570 - Improper input validation
CVE-2017-16660
CWE-20 High
No
No
- 07.12.2017 SB2017111504
SB2017112305
SB2017111909
and 3 more
#VU9569 - Exposure of sensitive information to an unauthorized actor
CVE-2017-16661
CWE-200 Low
No
No
- 02.12.2017 SB2017111504
SB2017112305
SB2017111909
and 3 more
#VU9338 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-16785
CWE-79 Low
No
No
- 14.11.2017 SB2017111504
SB2017112305
SB2017111909
and 3 more
#VU8826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15194
CWE-79 Low
No
No
- 13.10.2017 SB2017101307
SB2017111514
SB2017101725
and 4 more
#VU7989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12927
CWE-79 Low
No
No
- 18.08.2017 SB2017082101
SB2017100210
SB2017082218
and 3 more
#VU7584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11691
CWE-79 Low
No
No
- 25.07.2017 SB2017072501
SB2017072716
#VU38710 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-1000031
CWE-89 High
No
No
- 17.07.2017 SB2017071732


Showing elements 81 - 100 out of 120