Description
Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.
References (3)
Core 3
Core References
Various Sources x_refsource_confirm
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
Third Party Advisory x_refsource_confirm
https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
Various Sources x_refsource_misc
https://khoori.org/posts/cve-2022-0507/
Scores
CVSS v3
5.8
EPSS
0.0122
EPSS Percentile
65.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
Details
CWE
CWE-89
Status
published
Products (1)
pandorafms/pandora_fms
< 760
Published
Mar 10, 2022
Tracked Since
Feb 18, 2026