Proxmox kayıtları
proxmox üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %7,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-203 Observable Discrepancy1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-35508İstismar yok | Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy anproxmox · proxmox mail gateway · CWE-918 | Kritik9,8 | — | %1,2 | 4 Ara 2022 |
39İzleyin | CVE-2026-51080İstismar yok | libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.proxmox · libpve-storage-perl · CWE-611 | Kritik9,8 | — | %0,5 | 17 Tem 2026 |
36İzleyin | CVE-2022-31358İstismar yok | A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitproxmox · virtual environment · CWE-79 | Kritik9,0 | — | %1,3 | 14 Ara 2022 |
35İzleyin | CVE-2023-43320İstismar yok | An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.proxmox · backup server | Yüksek8,8 | — | %1,3 | 27 Eyl 2023 |
32İzleyin | CVE-2024-21545Kavram kanıtı | Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization.proxmox · pve-manager · CWE-73 | Yüksek8,2 | — | %0,3 | 24 Eyl 2024 |
28İzleyin | CVE-2022-35507Kavram kanıtı | A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows proxmox · proxmox mail gateway · CWE-74 | Yüksek7,1 | — | %1,4 | 4 Ara 2022 |
24İzleyin | CVE-2015-9058İstismar yok | Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary weproxmox · proxmox mail gateway · CWE-601 | Orta6,1 | — | %0,8 | 3 May 2017 |
24İzleyin | CVE-2015-9057İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject proxmox · proxmox mail gateway · CWE-79 | Orta6,1 | — | %0,7 | 3 May 2017 |
24İzleyin | CVE-2023-46854İstismar yok | Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature.proxmox · proxmox-widget-toolkit · CWE-79 | Orta6,1 | — | %0,3 | 28 Eki 2023 |
21İzleyin | CVE-2014-4156İstismar yok | Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerabilityproxmox · virtual environment · CWE-203 | Orta5,3 | — | %1,2 | 27 Oca 2020 |
21İzleyin | CVE-2025-57538İstismar yok | A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Envirproxmox · virtual environment · CWE-79 | Orta5,4 | — | %0,3 | 9 Eyl 2025 |
21İzleyin | CVE-2025-57539İstismar yok | A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVproxmox · virtual environment · CWE-79 | Orta5,4 | — | %0,2 | 9 Eyl 2025 |
21İzleyin | CVE-2025-57540İstismar yok | A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox proxmox · virtual environment · CWE-79 | Orta5,4 | — | %0,2 | 9 Eyl 2025 |
17İzleyin | CVE-2014-2325İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web sproxmox · mail gateway · CWE-79 | Orta4,3 | — | %1,2 | 14 Mar 2014 |
- CVE-2022-3550839İzleyin
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy an
KritikCVSS 9,8İstismar yokEPSS %1proxmox · proxmox mail gateway4 Ara 2022
- CVE-2026-5108039İzleyin
libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0proxmox · libpve-storage-perl17 Tem 2026
- CVE-2022-3135836İzleyin
A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbit
KritikCVSS 9,0İstismar yokEPSS %1proxmox · virtual environment14 Ara 2022
- CVE-2023-4332035İzleyin
An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.
YüksekCVSS 8,8İstismar yokEPSS %1proxmox · backup server27 Eyl 2023
- CVE-2024-2154532İzleyin
Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization.
YüksekCVSS 8,2Kavram kanıtıEPSS %0proxmox · pve-manager24 Eyl 2024
- CVE-2022-3550728İzleyin
A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows
YüksekCVSS 7,1Kavram kanıtıEPSS %1proxmox · proxmox mail gateway4 Ara 2022
- CVE-2015-905824İzleyin
Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary we
OrtaCVSS 6,1İstismar yokEPSS %0proxmox · proxmox mail gateway3 May 2017
- CVE-2015-905724İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject
OrtaCVSS 6,1İstismar yokEPSS %0proxmox · proxmox mail gateway3 May 2017
- CVE-2023-4685424İzleyin
Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature.
OrtaCVSS 6,1İstismar yokEPSS %0proxmox · proxmox-widget-toolkit28 Eki 2023
- CVE-2014-415621İzleyin
Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1proxmox · virtual environment27 Oca 2020
- CVE-2025-5753821İzleyin
A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Envir
OrtaCVSS 5,4İstismar yokEPSS %0proxmox · virtual environment9 Eyl 2025
- CVE-2025-5753921İzleyin
A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PV
OrtaCVSS 5,4İstismar yokEPSS %0proxmox · virtual environment9 Eyl 2025
- CVE-2025-5754021İzleyin
A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox
OrtaCVSS 5,4İstismar yokEPSS %0proxmox · virtual environment9 Eyl 2025
- CVE-2014-232517İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web s
OrtaCVSS 4,3İstismar yokEPSS %1proxmox · mail gateway14 Mar 2014