A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/.
Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability
End of life: 7/31/2024, Latest version: 7.4
End of life: 7/31/2024, Latest version: 7.4
End of life: 9/30/2022, Latest version: 6.4
End of life: 9/30/2022, Latest version: 6.4
End of life: 7/31/2020, Latest version: 5.4
End of life: 7/31/2020, Latest version: 5.4
End of life: 6/30/2018, Latest version: 4.4
End of life: 6/30/2018, Latest version: 4.4
End of life: 2/28/2017, Latest version: 3.4
End of life: 2/28/2017, Latest version: 3.4
End of life: 5/31/2014, Latest version: 2.3
End of life: 5/31/2014, Latest version: 2.3
End of life: 1/31/2013, Latest version: 1.9
End of life: 1/31/2013, Latest version: 1.9