CVE-2023-44089: XSS in Visual Console
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). It was possible to execute malicious JS code on Visual Consoles. This issue affects Pandora FMS: from 700 through 774.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44089?
CVE-2023-44089 is classified as a Cross-Site Scripting (XSS) vulnerability, which poses a medium to high severity risk depending on the exploitation context.
How do I fix CVE-2023-44089?
To fix CVE-2023-44089, it is recommended to upgrade Pandora FMS to a version above 774 where this vulnerability is patched.
What impacts does CVE-2023-44089 have on my system?
CVE-2023-44089 allows attackers to execute malicious JavaScript code on Visual Consoles, potentially compromising user data and system integrity.
Which versions of Pandora FMS are affected by CVE-2023-44089?
CVE-2023-44089 affects all versions of Pandora FMS from 700 to 774.
Can CVE-2023-44089 be exploited remotely?
Yes, CVE-2023-44089 can be exploited remotely if an attacker can inject malicious scripts into web pages viewed by users.