Cacti vulnerabilities
68 CVEs and advisories name Cacti as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-39360Reflected Cross-site Scripting in graphs_new.php in Cacti
- CVE-2023-39366Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti
- CVE-2023-39510Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti
- CVE-2023-39512Stored Cross-site Scripting on data_sources.php device name view in Cacti
- CVE-2023-39513Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti
- CVE-2023-39515Stored Cross-site Scripting on data_debug.php datasource path view in Cacti
- CVE-2023-39514Stored Cross-site Scripting on graphs.php data template formated name view in Cacti
- CVE-2022-46169Unauthenticated Command Injection