Vendors / Percona Records 22 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 9
Exploited now Percona records in CISA KEV No Percona vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths to reject path traversal attempts.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01278 · Published 2023-06-06 · No fix listed CWE-22
Priority MEDIUM 43
An issue was discovered in Percona PMM before 3.7.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.003 · Published 2026-04-02 · No fix listed CWE-250
Priority LOW 37
pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02097 · Published 2020-02-06 · No fix listed CWE-835
Open these records in search → All records by CVSS severity
7 9 5 1 0
