CVE-2020-11749 in FMS

Riassunto

di MITRE

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 14/04/2020
• Moderazione: accettato
• Voce: VDB-157867
• CPE: pronto
• CWE: CWE-79 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.6 (NVD)
• EPSS: 0.16226
• KEV: no
• Attività: molto basso
• Settore: Government, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-11749
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-11749
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-11749/