Skip to content
OpenAdvisories

Vendor

Pandora FMS

56 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-11320 Public exploit Scanner template EPSS 91%

    Command Injection leading to RCE via LDAP Misconfiguration

    Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4

  • Medium 5.9
    CVE-2023-44088 Public exploit

    SQL Injection in Visual Console

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora …