Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Artica PFMS — Vulnerabilities & Security Advisories 27

Browse all 27 CVE security advisories affecting Artica PFMS. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Artica PFMS is a French-based platform management system designed to simplify the administration of complex IT infrastructures, particularly for hosting providers and data centers. It centralizes the configuration of web servers, mail services, and databases, allowing administrators to manage multiple services through a unified interface. Security audits have identified twenty-seven Common Vulnerabilities and Exposures (CVEs) associated with the software, highlighting significant historical weaknesses. These vulnerabilities predominantly involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and improper access controls in older versions. While recent updates have addressed many critical issues, the product’s past incident history underscores the risks inherent in its complex architecture. Users are advised to maintain strict patch management protocols to mitigate exposure to known exploit vectors within the platform’s diverse service modules.

Found 27 results / 27 Clear Filters
Top products by Artica PFMS: Pandora FMS
CVE ID Title CVSS Severity Published
CVE-2023-0828 Stored Cross Site Scripting in syslog section — Pandora FMS CWE-79 6.7 Medium 2023-10-03
CVE-2023-24518 Disabling the administrator's account through cross-site request forgery — Pandora FMS CWE-352 6.7 Medium 2023-10-03
CVE-2023-24517 Remote Code Execution via Unrestricted File Upload — Pandora FMS CWE-434 6.4 Medium 2023-08-22
CVE-2023-24516 Stored Cross Site Scripting - Special Days Module — Pandora FMS CWE-79 5.9 Medium 2023-08-22
CVE-2023-24514 Stored Cross Site Scripting Vulnerability in Visual Console Module — Pandora FMS CWE-79 6.3 Medium 2023-08-22
CVE-2023-24515 Server side request forgery in api checker — Pandora FMS CWE-918 5.2 Medium 2023-08-22
CVE-2023-2807 Authentication bypass in password reset process — Pandora FMS CWE-290 6.4 Medium 2023-06-13
CVE-2022-47373 Reflected Cross Site Scripting in Search Functionality of Module Library — Pandora FMS CWE-352 6.4 Medium 2023-02-15
CVE-2022-47372 Stored cross-site scripting vulnerability in create event section — Pandora FMS CWE-352 7.6 High 2023-02-15
CVE-2022-45437 Stored cross-site scripting vulnerability in the reporting dashboard module — Pandora FMS CWE-79 6.5 Medium 2023-02-15
CVE-2022-45436 Stored cross-site scripting vulnerability in network maps editor feature — Pandora FMS CWE-79 6.1 Medium 2023-02-15
CVE-2022-43978 Limited Authentication bypass due to hardcoded secret — Pandora FMS CWE-287 5.6 Medium 2023-01-27
CVE-2022-43980 Cross-site scripting vulnerability in the network maps edit functionality — Pandora FMS CWE-352 5.2 Medium 2023-01-27
CVE-2022-43979 Path Traversal leading to Local File Inclusion — Pandora FMS CWE-434 5.9 Medium 2023-01-27
CVE-2021-46678 Vulnerability XSS in service form name field — Pandora FMS CWE-79 4.0 Medium 2022-08-05
CVE-2021-46680 Vulnerability XSS in module form name field — Pandora FMS CWE-79 4.0 Medium 2022-08-05
CVE-2021-46677 Vulnerability XSS in Event filter name field — Pandora FMS CWE-79 4.0 Medium 2022-08-05
CVE-2021-46676 Vulnerability XSS in Transaction Map name field — Pandora FMS CWE-79 4.0 Medium 2022-08-05
CVE-2021-46679 Vulnerability XSS in service elements — Pandora FMS CWE-79 4.0 Medium 2022-08-05
CVE-2021-46681 Vulnerability XSS in module mass operation name field — Pandora FMS CWE-79 4.0 Medium 2022-08-05
CVE-2022-26310 Improper Authorization in User Management to Vertical Privilege Escalation — Pandora FMS CWE-285 7.3 High 2022-08-01
CVE-2022-26309 Cross-Site Request en Bulk operation (User operation) — Pandora FMS CWE-352 3.7 Low 2022-08-01
CVE-2022-26308 Improper Access Control in Configuration (Credential store) — Pandora FMS CWE-284 3.7 Low 2022-08-01
CVE-2022-1648 Relative Path Traversal to Remote Code Execution in File Manager — Pandora FMS CWE-23 5.7 Medium 2022-07-26
CVE-2022-2059 Stored Cross Site-Scripting in Agent Manager — Pandora FMS CWE-79 3.5 Low 2022-07-25
CVE-2022-2032 Stored Cross Site-Scripting in File Manager — Pandora FMS CWE-79 3.5 Low 2022-07-25
CVE-2022-0507 Vulnerability: Authenticated SQL Injection in API — Pandora FMS CWE-89 5.8 Medium 2022-03-09

This page lists every published CVE security advisory associated with Artica PFMS. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.