Pandora FMS — Vulnerabilities & Security Advisories 84

All 84 CVE vulnerabilities found in Pandora FMS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for Pandora FMS, a free open-source Field Maintenance Service (FMS) software, covering specific weakness types and security tags. The collection includes historical advisories, bug reports, and security patches related to input validation, access control, and injection flaws over the product's development timeline. Readers can use this index to track vendor-issued security updates, analyze recurring weakness patterns, and review the full vulnerability history for Pandora FMS instances.

Vendor: Artica PFMS

CVE ID	Title	CVSS	Severity	Published
CVE-2023-24516	Stored Cross Site Scripting - Special Days Module CWE-79	5.9	Medium	2023-08-22
CVE-2023-24514	Stored Cross Site Scripting Vulnerability in Visual Console Module CWE-79	6.3	Medium	2023-08-22
CVE-2023-24515	Server side request forgery in api checker CWE-918	5.2	Medium	2023-08-22
CVE-2023-2807	Authentication bypass in password reset process CWE-290	6.4	Medium	2023-06-13
CVE-2022-47373	Reflected Cross Site Scripting in Search Functionality of Module Library CWE-352	6.4	Medium	2023-02-15
CVE-2022-47372	Stored cross-site scripting vulnerability in create event section CWE-352	7.6	High	2023-02-15
CVE-2022-45437	Stored cross-site scripting vulnerability in the reporting dashboard module CWE-79	6.5	Medium	2023-02-15
CVE-2022-45436	Stored cross-site scripting vulnerability in network maps editor feature CWE-79	6.1	Medium	2023-02-15
CVE-2022-43980	Cross-site scripting vulnerability in the network maps edit functionality CWE-352	5.2	Medium	2023-01-27
CVE-2022-43979	Path Traversal leading to Local File Inclusion CWE-434	5.9	Medium	2023-01-27
CVE-2022-43978	Limited Authentication bypass due to hardcoded secret CWE-287	5.6	Medium	2023-01-27
CVE-2021-46678	Vulnerability XSS in service form name field CWE-79	4.0	Medium	2022-08-05
CVE-2021-46680	Vulnerability XSS in module form name field CWE-79	4.0	Medium	2022-08-05
CVE-2021-46677	Vulnerability XSS in Event filter name field CWE-79	4.0	Medium	2022-08-05
CVE-2021-46676	Vulnerability XSS in Transaction Map name field CWE-79	4.0	Medium	2022-08-05
CVE-2021-46679	Vulnerability XSS in service elements CWE-79	4.0	Medium	2022-08-05
CVE-2021-46681	Vulnerability XSS in module mass operation name field CWE-79	4.0	Medium	2022-08-05
CVE-2022-26310	Improper Authorization in User Management to Vertical Privilege Escalation CWE-285	7.3	High	2022-08-01
CVE-2022-26309	Cross-Site Request en Bulk operation (User operation) CWE-352	3.7	Low	2022-08-01
CVE-2022-26308	Improper Access Control in Configuration (Credential store) CWE-284	3.7	Low	2022-08-01
CVE-2022-1648	Relative Path Traversal to Remote Code Execution in File Manager CWE-23	5.7	Medium	2022-07-26
CVE-2022-2059	Stored Cross Site-Scripting in Agent Manager CWE-79	3.5	Low	2022-07-25
CVE-2022-2032	Stored Cross Site-Scripting in File Manager CWE-79	3.5	Low	2022-07-25
CVE-2022-0507	Vulnerability: Authenticated SQL Injection in API CWE-89	5.8	Medium	2022-03-09

All 84 known CVE vulnerabilities affecting Pandora FMS with full Chinese analysis, references, and POCs where available.