Cacti vulnerabilities
68 CVEs and advisories name Cacti as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-43362Stored Cross-site Scripting (XSS) when creating external links in Cacti
- CVE-2024-34340Authentication Bypass when using using older password hashes
- CVE-2024-31460Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database
- CVE-2024-31459Cacti RCE vulnerability by file include in lib/plugin.php
- CVE-2024-31458Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database
- CVE-2024-31445SQL Injection vulnerability in automation_get_new_graphs_sql
- CVE-2024-31444Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database
- CVE-2024-31443Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database
- CVE-2024-30268Cacti XSS vulnerability in display_settings
- CVE-2024-29895Cacti command injection in cmd_realtime.php
- CVE-2024-29894Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API
- CVE-2024-27082Cacti Cross-site Scripting vulnerability when managing trees
- CVE-2024-25641Cacti RCE vulnerability when importing packages
- CVE-2023-51448SQL Injection vulnerability when managing SNMP Notification Receivers
- CVE-2023-50250Cross-Site Scripting vulnerability when Import xml template file
- CVE-2023-49088Cacti has incomplete fix for CVE-2023-39515
- CVE-2023-49085Cacti SQL Injection vulnerability
- CVE-2023-49086Cacti is vulnerable to cross-Site scripting (XSS) DOM
- CVE-2023-49084Local File Inclusion (RCE) in Cacti
- CVE-2023-39511Stored Cross-Site-Scripting on reports_admin.php device name in Cacti
- CVE-2023-30534Insecure Deserialization in Cacti
- CVE-2023-31132Cacti Privilege Escalation
- CVE-2023-39362Authenticated command injection in SNMP options of a Device
- CVE-2023-39364Open redirect in change password functionality in Cacti
- CVE-2023-39516Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti
- CVE-2023-39365Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti
- CVE-2023-39357A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti
- CVE-2023-39358Authenticated SQL injection vulnerability in reports_user.php in Cacti
- CVE-2023-39359Authenticated SQL injection vulnerability in graphs.php in Cacti
- CVE-2023-39361Unauthenticated SQL Injection in graph_view.php in Cacti