CVE-2021-46681: Vulnerability XSS in module mass operation name field
Published Aug 5, 2022
·Updated
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field.
Affected Software
1 affected component
Artica Pandora FMS<757
Remediation
Information
This vulnerability has been solved in the 757 version of Pandora FMS.
Event History
Aug 5, 2022
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this XSS vulnerability in Pandora FMS?
The vulnerability ID for this XSS vulnerability in Pandora FMS is CVE-2021-46681.
2
What is the severity of CVE-2021-46681?
The severity of CVE-2021-46681 is medium with a CVSS score of 6.1.
3
How does the XSS vulnerability in Pandora FMS version 756 and below impact users?
The XSS vulnerability in Pandora FMS version 756 and below allows an attacker to perform javascript code executions via the module massive operation name field.
4
Which software versions are affected by the XSS vulnerability in Pandora FMS?
The XSS vulnerability in Pandora FMS affects version 756 and below.
5
How can I fix the XSS vulnerability in Pandora FMS?
To fix the XSS vulnerability in Pandora FMS, it is recommended to update to version 757 or higher.