Pandora FMS vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.0	EPSS 1.5%	CVE-2025-4678Pandora ITSM · Command Injection High7.0EPSS 1.5%2025-06-10CVE Database V5CVE-2025-4678 Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105. EPSS 1.5%Vulnerability Pandora FMS CWE-77	CVE Database V5	2025-06-10
High	7.0	EPSS 3.4%	CVE-2025-4653Pandora ITSM · Command Injection High7.0EPSS 3.4%2025-06-10CVE Database V5CVE-2025-4653 Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105. EPSS 3.4%Vulnerability Pandora FMS CWE-77	CVE Database V5	2025-06-10
High	8.4	EPSS 0.5%	CVE-2023-41791Pandora FMS · Cross-site Scripting High8.4EPSS 0.5%2023-11-23CVE Database V5CVE-2023-41791 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed users with low privileges to introduce Javascript executables via a translation string that could affect the integrity of some configuration files. This issue affects Pandora FMS: from 700 through 773. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2023-11-23

Page 1 of 1