CVE-2021-46681: Artica Pandora Fms

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field.

Affected products

  • Artica Pandora Fms: before 757 (fixed in 757)

Published 2022-08-05. Last modified 2026-06-17.