proxmox virtual environment
ProduktUScpe:2.3:a:proxmox:virtual_environment:*:*:*:*:*:*:*:*
Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.
0
KEV-gelistet
0
öffentlicher Exploit
0
EPSS ≥ 10%
nach Schweregrad
2critical2high1medium0low
aktualisiert 2026-10-31
01
Schwachstellen (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||||
|---|---|---|---|---|---|---|
| CVE-2022-35507US | high7.1 | — | ||||
A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a v… | ||||||
| CVE-2023-43320US | high8.8 | — | ||||
An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticat… | ||||||
| CVE-2022-31358US | critical9.0 | — | ||||
A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existen… | ||||||
| CVE-2022-35508US | critical9.8 | — | ||||
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an un… | ||||||
| CVE-2014-4156US | medium5.3 | — | ||||
Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability | ||||||
| CVE-2025-57538US | — | — | ||||
A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an authenticated… | ||||||
| CVE-2025-57540US | — | — | ||||
A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4. Authentic… | ||||||
| CVE-2025-57539US | — | — | ||||
A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to sto… | ||||||
02
Schwächen (5)
Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.
03
Datenquellen (1)
Welche Quellen diesen Datensatz belegen und wann.
- USNVD / CVE8 CVEs
scry
Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan