Pandora FMS Vulnerabilities and Affected Products
Vulnerabilities associated with Pandora ITSM.
Products
Clear product- Pandora FMS46 vulnerabilities
- Pandora ITSM2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-4678HIGH | Remote Code Execution leads to Command InjectionImproper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105. CWE-77Jun 10, 2025 | CVSS7.0v4.0 | EPSS1.51% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-4653HIGH | Remote Code Execution leads to Command InjectionImproper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105. CWE-77Jun 10, 2025 | CVSS7.0v4.0 | EPSS3.45% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |