CVE-2020-11749: Pandorafms Pandora Fms

Critical severity, CVSS 9.0. EPSS: 16.2% chance of exploitation in the next 30 days.

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2.

Affected products

• Pandorafms Pandora Fms: from 7.0_ng, up to and including 746

Published 2020-07-13. Last modified 2026-06-17.