TI-2015-05715 CVE-2015-6816 · GHSA-mgrr-7c88-34fm
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
Priority MEDIUM 48
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
Ganglia
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Ganglia records in CISA KEVNo Ganglia vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Ganglia-web · all components
TI-2012-02976 CVE-2012-3448 · GHSA-qv5c-fqrv-r4vp
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute…
Priority MEDIUM 45
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
TI-2019-14613 CVE-2019-20378 · GHSA-fwwm-g9v9-26x8
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
Priority LOW 30
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
TI-2024-35288 CVE-2024-52762 · GHSA-99p7-c89v-ph5p
A cross-site scripting (XSS) vulnerability in the component /master/header.php of…
Priority LOW 29
A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" paramete…
TI-2019-14614 CVE-2019-20379 · GHSA-24pq-f9c8-764p
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.
Priority LOW 29
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.
TI-2024-35289 CVE-2024-52763 · GHSA-c9hj-p989-pvmr
A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of…
Priority LOW 28
A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" param…
TI-2013-05351 CVE-2013-6395 · GHSA-xx3m-g78m-fjqh
Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by…
TI-2013-01557 CVE-2013-1770 · GHSA-rvqj-8964-prw3
Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.
TI-2013-00209 CVE-2013-0275 · GHSA-g57r-hv37-c5q8
Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.