Skip to content
OpenAdvisories
Unscored DLA-40-1 4 CVEs

cacti - security update

Published Aug 22, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 cacti 0.8.7g-1+squeeze5

Vulnerabilities 4

  • Unscored —

    Cross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote authenticated users with con…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console acces…

  • Unscored —
    CVE-2014-5261 EPSS 11%

    The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary…

  • Unscored —

    SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote…