p
pandorafms
Security Risk Profile
76
/100
highSecurity Risk Score
Comprehensive risk assessment based on 48 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 19, 2014 to present
48
Total CVEs
23
Critical+High
1
Exploited
9
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
9
Critical/High
Risk Level
76/100
high
⚠️ 1 Active Exploits
Severity Distribution
Critical
10High
13Medium
25Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
25
2
CSRF
5
3
Malicious File Upload
5
4
Path Traversal
3
5
SQL Injection
3
Most Affected Products
1. PandoraFMS Pandora FMS46
2. Pandora FMS Pandora FMS1
3. PandoraFMS Artica Pandora Fms1
4. PandoraFMS Pandora Flexible Monitoring System1
Recent Vulnerabilities
See more →CVE-2025-34088
CVSS 8.8high
Pandora FMS Authenticated Remote Code Execution via Ping Module
Jul 3, 2025🔧 No Patch
CVE-2024-11320
CVSS 9.8critical
Command Injection leading to RCE via LDAP Misconfiguration
Nov 21, 2024
CVE-2024-35308
CVSS 8.8high
Post-auth Arbitrary File Read in the Server Plugins Section
Oct 22, 2024
CVE-2024-9987
CVSS 8.8EPSS 0%high
SQL Injection in CSV Module Data Collection
Oct 22, 2024
CVE-2023-44089
CVSS 6.1medium
XSS in Visual Console
Dec 29, 2023
CVE-2023-44088
CVSS 8.8high
SQL Injection in Visual Console
Dec 29, 2023⚠ Exploited
CVE-2023-41815
CVSS 7.5high
XSS in File manager
Dec 29, 2023
CVE-2023-41814
CVSS 6.1medium
XSS Vulnerability Messages
Dec 29, 2023
CVE-2023-41813
CVSS 6.1medium
User notification settings edition
Dec 29, 2023
CVE-2023-0828
CVSS 6.7medium
Stored Cross Site Scripting in syslog section
Oct 3, 2023
Monitor pandorafms in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.