Advisories · Technology

Artica ST Pandora FMS.

Every CVE that names Artica ST Pandora FMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2014-125124 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection
- Artica ST Pandora FMS
- Command injection
- Authentication bypass
Not analysed yet 31 Jul 2025
CVE-2014-125115 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE
- Artica ST Pandora FMS
- SQL injection
- Hard-coded credentials
Not analysed yet 25 Jul 2025
CVE-2025-34088 CVE record

CVSS 8.6 High

Pandora FMS Authenticated Remote Code Execution via Ping Module
- Artica ST Pandora FMS
- Command injection
Not analysed yet 3 Jul 2025