Proxmox

Virtual Environment

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-57538

Exploit
  • EPSS 0.04%
  • Veröffentlicht 09.09.2025 00:00:00
  • Zuletzt bearbeitet 18.09.2025 17:41:56

A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an authenticated user to inject malicious input. The input is stored and executed in t...

5.4

CVE-2025-57539

Exploit
  • EPSS 0.03%
  • Veröffentlicht 09.09.2025 00:00:00
  • Zuletzt bearbeitet 18.09.2025 17:41:04

A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and...

5.4

CVE-2025-57540

Exploit
  • EPSS 0.03%
  • Veröffentlicht 09.09.2025 00:00:00
  • Zuletzt bearbeitet 17.09.2025 20:11:20

A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4. Authenticated users can inject JavaScript code that is later executed in the br...

8.2

CVE-2024-21545

  • EPSS 0.15%
  • Veröffentlicht 25.09.2024 01:15:40
  • Zuletzt bearbeitet 26.09.2024 13:32:02

Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 'Sys.Audit' or 'VM.Monitor' privileges to downloa...

8.8

CVE-2023-43320

  • EPSS 3.15%
  • Veröffentlicht 27.09.2023 23:15:12
  • Zuletzt bearbeitet 21.11.2024 08:23:59

An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to escalate privileges via bypassing the two-factor authen...

9

CVE-2022-31358

Exploit
  • EPSS 0.87%
  • Veröffentlicht 14.12.2022 15:15:10
  • Zuletzt bearbeitet 22.04.2025 16:15:29

A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/.

7.1

CVE-2022-35507

Exploit
  • EPSS 14.33%
  • Veröffentlicht 04.12.2022 19:15:09
  • Zuletzt bearbeitet 24.04.2025 16:15:20

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a cli...

9.8

CVE-2022-35508

Exploit
  • EPSS 0.65%
  • Veröffentlicht 04.12.2022 19:15:09
  • Zuletzt bearbeitet 24.04.2025 16:15:20

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file ...

5.3

CVE-2014-4156

  • EPSS 0.21%
  • Veröffentlicht 27.01.2020 15:15:11
  • Zuletzt bearbeitet 21.11.2024 02:09:36

Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability