Proxmox

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Proxmox records in CISA KEV

No Proxmox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Virtual Environment 8 records HIGH Proxmox Mail Gateway 5 records HIGH Pve Http Server 2 records HIGH Backup Server 1 record MEDIUM Libpve-storage-perl 1 record MEDIUM Mail Gateway 1 record LOW Proxmox-widget-toolkit 1 record LOW

Records

2 records in Pve Http Server · all components

TI-2022-16050 CVE-2022-35508 · GHSA-jfjw-xc26-6xpm

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF…

HIGH 82

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01242 Published 2022-12-04 No fix listed CWE-918

TI-2022-16049 CVE-2022-35507 · GHSA-xfgp-gpjw-wmqr

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE)…

MEDIUM 64

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01458 Published 2022-12-04 No fix listed CWE-74

Open these records in search →

Critical	3
High	3
Medium	9
Low	0
No CVSS	0