Medium severity5.4NVD Advisory· Published Oct 27, 2017· Updated Jun 17, 2026
CVE-2017-15936
CVE-2017-15936
Description
In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed.
Affected products
2cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*
- (no CPE)range: 7.0
Patches
Vulnerability mechanics
References
1- medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72dnvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.