CA
Product
cacti
On CISA KEVExploited in the wild
156
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 11High 43Medium 63Low 1
Watch
Add cacti to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-4032 | – | Nov 29 | Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2)… Affected: 0.8.7e |
| CVE-2008-0785 | – | Feb 14 | Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1)… Affected: 0.6.7; 0.8; 0.8.1; 0.8.2; 0.8.2a; 0.8.3; +10 more |
| CVE-2008-0783 | – | Feb 14 | Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the… Affected: 0.6.7; 0.8; 0.8.1; 0.8.2; 0.8.2a; 0.8.3; +10 more |
| CVE-2008-0784 | – | Feb 14 | graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified… Affected: 0.6.7; 0.8; 0.8.1; 0.8.2; 0.8.2a; 0.8.3; +10 more |
| CVE-2008-0786 | – | Feb 14 | CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers… Affected: 0.6.7; 0.8; 0.8.1; 0.8.2; 0.8.2a; 0.8.3; +10 more |
| CVE-2007-6035 | – | Nov 20 | SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter Affected: through 0.8.7 |