Vulnerabilities

TI-2024-35289 CVE-2024-52763 · GHSA-c9hj-p989-pvmr

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of…

LOW 28

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" param…

CVSS 3.1MEDIUM 6.1 Network Low privileges User interaction EPSS 0.00652 Published 2024-11-19 No fix listed CWE-79

TI-2024-35288 CVE-2024-52762 · GHSA-99p7-c89v-ph5p

A cross-site scripting (XSS) vulnerability in the component /master/header.php of…

LOW 29

A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" paramete…

CVSS 3.1MEDIUM 6.1 Network Low privileges User interaction EPSS 0.00774 Published 2024-11-19 No fix listed CWE-79

TI-2019-14613 CVE-2019-20378 · GHSA-fwwm-g9v9-26x8

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

LOW 30

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01171 Published 2020-01-11 No fix listed CWE-79

TI-2019-14614 CVE-2019-20379 · GHSA-24pq-f9c8-764p

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

LOW 29

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00921 Published 2020-01-11 No fix listed CWE-79

TI-2015-05715 CVE-2015-6816 · GHSA-mgrr-7c88-34fm

ganglia-web before 3.7.1 allows remote attackers to bypass authentication.

MEDIUM 48

ganglia-web before 3.7.1 allows remote attackers to bypass authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03562 Published 2017-08-09 No fix listed CWE-287

TI-2013-01557 CVE-2013-1770 · GHSA-rvqj-8964-prw3

Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows…

LOW 24

Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02164 Published 2014-04-02 No fix listed CWE-79

TI-2013-05351 CVE-2013-6395 · GHSA-xx3m-g78m-fjqh

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10…

LOW 24

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02199 Published 2013-12-05 No fix listed CWE-79

TI-2013-00209 CVE-2013-0275 · GHSA-g57r-hv37-c5q8

Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01925 Published 2013-03-12 No fix listed CWE-79

TI-2012-02976 CVE-2012-3448 · GHSA-qv5c-fqrv-r4vp

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute…

MEDIUM 45

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09944 Published 2012-08-06 No fix listed

Vulnerabilities

Filters