Vulnerabilities

TI-2023-23190 CVE-2023-43320 · GHSA-prc6-xmpq-r4g3

An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup…

MEDIUM 43

An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to escalate privileges via b…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01386 Published 2023-09-27 No fix listed

TI-2022-16050 CVE-2022-35508 · GHSA-jfjw-xc26-6xpm

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF…

HIGH 82

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01242 Published 2022-12-04 No fix listed CWE-918

TI-2022-16049 CVE-2022-35507 · GHSA-xfgp-gpjw-wmqr

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE)…

MEDIUM 64

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01458 Published 2022-12-04 No fix listed CWE-74

TI-2015-07469 CVE-2015-9058 · GHSA-g67j-4xx4-92c4

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows…

LOW 29

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00881 Published 2017-05-03 No fix listed CWE-601

TI-2015-07468 CVE-2015-9057 · GHSA-fpx2-gjww-gx77

Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to…