# cve.now: Artica Pfms

The newest entries naming Artica Pfms as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-0828](https://cve.now/CVE-2023-0828.md): Stored Cross Site Scripting in syslog section (CVSS 6.7)
- [CVE-2023-24518](https://cve.now/CVE-2023-24518.md): Disabling the administrator's account through cross-site request forgery (CVSS 6.7)
- [CVE-2023-24517](https://cve.now/CVE-2023-24517.md): Remote Code Execution via Unrestricted File Upload (CVSS 6.4)
- [CVE-2023-24516](https://cve.now/CVE-2023-24516.md): Stored Cross Site Scripting - Special Days Module (CVSS 5.9)
- [CVE-2023-24514](https://cve.now/CVE-2023-24514.md): Stored Cross Site Scripting Vulnerability in Visual Console Module (CVSS 6.3)
- [CVE-2023-24515](https://cve.now/CVE-2023-24515.md): Server side request forgery in api checker (CVSS 5.2)
- [CVE-2023-2807](https://cve.now/CVE-2023-2807.md): Authentication bypass in password reset process (CVSS 6.4)
- [CVE-2022-47373](https://cve.now/CVE-2022-47373.md): Reflected Cross Site Scripting in Search Functionality of Module Library (CVSS 6.4)
- [CVE-2022-47372](https://cve.now/CVE-2022-47372.md): Stored cross-site scripting vulnerability in create event section (CVSS 7.6)
- [CVE-2022-45437](https://cve.now/CVE-2022-45437.md): Stored cross-site scripting vulnerability in the reporting dashboard module (CVSS 6.5)
- [CVE-2022-45436](https://cve.now/CVE-2022-45436.md): Stored cross-site scripting vulnerability in network maps editor feature (CVSS 6.1)
- [CVE-2022-43980](https://cve.now/CVE-2022-43980.md): Cross-site scripting vulnerability in the network maps edit functionality (CVSS 5.2)
- [CVE-2022-43979](https://cve.now/CVE-2022-43979.md): Path Traversal leading to Local File Inclusion (CVSS 5.9)
- [CVE-2022-43978](https://cve.now/CVE-2022-43978.md): Limited Authentication bypass due to hardcoded secret (CVSS 5.6)
- [CVE-2021-46678](https://cve.now/CVE-2021-46678.md): Vulnerability XSS in service form name field (CVSS 4.0)
- [CVE-2021-46680](https://cve.now/CVE-2021-46680.md): Vulnerability XSS in module form name field (CVSS 4.0)
- [CVE-2021-46677](https://cve.now/CVE-2021-46677.md): Vulnerability XSS in Event filter name field (CVSS 4.0)
- [CVE-2021-46676](https://cve.now/CVE-2021-46676.md): Vulnerability XSS in Transaction Map name field (CVSS 4.0)
- [CVE-2021-46679](https://cve.now/CVE-2021-46679.md): Vulnerability XSS in service elements (CVSS 4.0)
- [CVE-2021-46681](https://cve.now/CVE-2021-46681.md): Vulnerability XSS in module mass operation name field (CVSS 4.0)
- [CVE-2022-26310](https://cve.now/CVE-2022-26310.md): Improper Authorization in User Management to Vertical Privilege Escalation (CVSS 7.3)
- [CVE-2022-26309](https://cve.now/CVE-2022-26309.md): Cross-Site Request en Bulk operation (User operation) (CVSS 3.7)
- [CVE-2022-26308](https://cve.now/CVE-2022-26308.md): Improper Access Control in Configuration (Credential store) (CVSS 3.7)
- [CVE-2022-1648](https://cve.now/CVE-2022-1648.md): Relative Path Traversal to Remote Code Execution in File Manager (CVSS 5.7)
- [CVE-2022-2059](https://cve.now/CVE-2022-2059.md): Stored Cross Site-Scripting in Agent Manager (CVSS 3.5)
- [CVE-2022-2032](https://cve.now/CVE-2022-2032.md): Stored Cross Site-Scripting in File Manager (CVSS 3.5)
- [CVE-2022-0507](https://cve.now/CVE-2022-0507.md): Vulnerability: Authenticated SQL Injection in API (CVSS 5.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/artica-pfms
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.