CVE-2023-44089

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). It was possible to execute malicious JS code on Visual Consoles. This issue affects Pandora FMS: from 700 through 774.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Dec 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-44098.8A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown funct CVE-2023-440906.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-581 CVE-2023-440919.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injectio CVE-2023-440929.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Com CVE-2023-440937.5Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affe CVE-2023-440945.3Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-440957.5Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.CVE-2023-440967.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service co CVE-2023-440977.5Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect servi CVE-2023-440987.5Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confiden CVE-2023-440997.5Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption.CVE-2023-44109.8A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDia