Known vulnerabilities in Cacti - page 6

Software: Cacti
Software CPE: cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*
Total vulnerabilities: 120
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cacti Cacti is affected by 120 known vulnerabilities: 1 critical, 16 high, 38 medium, 65 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27394 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2009-4112
CWE-78 Low
Available
No
0.8.7f 28.04.2020 SB2009113001
SB2020043036
SB2020042875
and 3 more
#VU38711 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1000032
CWE-79 Low
No
No
- 17.07.2017 SB2017071732
#VU7542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-10970
CWE-79 Low
No
No
- 15.07.2017 SB2017071601
SB2017070419
SB2017070420
and 3 more
#VU7543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11163
CWE-79 Medium
No
No
- 15.07.2017 SB2017071601
#VU33274 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-3172
CWE-89 High
No
No
- 12.04.2016 SB2016041220
SB2016080533
#VU33280 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-8604
CWE-89 High
No
No
- 12.04.2016 SB2016041221
SB2016030401
SB2016032409
#VU33277 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-3659
CWE-89 High
No
No
0.8.8a 11.04.2016 SB2016041108
SB2016053012
SB2016060212
and 5 more
#VU33281 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-8369
CWE-89 Medium
No
No
- 17.12.2015 SB2015121704
SB2016012730
#VU33278 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-8377
CWE-89 Low
No
No
- 15.12.2015 SB2015121512
SB2016031806
SB2016032409
#VU32404 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4634
CWE-89 Medium
No
No
- 11.08.2015 SB2015081111
SB2015073107
SB2016032409
#VU32418 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4342
CWE-89 Medium
No
No
0.8.8d 17.06.2015 SB2015061701
SB2015061522
SB2016032409
and 3 more
#VU33649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5025
CWE-79 Low
No
No
- 20.10.2014 SB2014102002
SB2014073003
SB2016032409
#VU33656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5026
CWE-79 Low
No
No
0.8.8c 20.10.2014 SB2014102003
SB2014073004
SB2016032409
#VU41386 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-5261
CWE-94 Medium
No
No
- 22.08.2014 SB2014082206
#VU41387 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-5262
CWE-89 Medium
No
No
- 22.08.2014 SB2014082206
#VU41840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-2708
CWE-89 Medium
No
No
- 10.04.2014 SB2014041003
SB2014060305
SB2014040808
and 1 more
#VU32633 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-1435
CWE-94 Medium
No
No
- 23.08.2013 SB2013082302
SB2013080606
SB2013090401
and 2 more
#VU32632 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-1434
CWE-89 Medium
No
No
- 23.08.2013 SB2013082301
SB2013080605
SB2013090401
and 2 more
#VU43370 - Cross-Site Request Forgery (CSRF)
CVE-2011-5223
CWE-352 Medium
No
No
- 25.10.2012 SB2012102503
#VU32836 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-4824
CWE-89 Medium
No
No
0.8.7h 15.12.2011 SB2011121502
SB2012010703


Showing elements 101 - 120 out of 120