Vulnerabilities

TI-2026-20368 CVE-2026-25212 · GHSA-hm6f-x2ww-p497

An issue was discovered in Percona PMM before 3.7.

MEDIUM 43

An issue was discovered in Percona PMM before 3.7.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.003 Published 2026-04-02 No fix listed CWE-250

TI-2023-17237 CVE-2023-34409 · GHSA-jxc6-p894-679v

In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate…

MEDIUM 51

In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths to reject path traversal attempts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01278 Published 2023-06-06 No fix listed CWE-22

TI-2020-06403 CVE-2020-7920 · GHSA-3fp3-6m8h-4x7c

pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.

LOW 37

pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02097 Published 2020-02-06 No fix listed CWE-835

Vulnerabilities

Filters

An issue was discovered in Percona PMM before 3.7.

In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate…

pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.