Product by Debian

    Cacti

    47 known vulnerabilities in Cacti (Debian), 1 of them actively exploited (CISA KEV).

    Key figures

    47

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cacti (Debian)
    CriticalCVE-2022-46169

    Unauthenticated Command Injection

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2023-39361

    Unauthenticated SQL Injection in graph_view.php in Cacti

    also in 2 other products

    		9.8
    HighCVE-2025-24367

    Cacti allows Arbitrary File Creation leading to RCE

    also in 1 other product

    		8.8
    HighCVE-2023-49085

    Cacti SQL Injection vulnerability

    also in 1 other product

    		8.8
    HighCVE-2023-49084

    Local File Inclusion (RCE) in Cacti

    also in 1 other product

    		8.1
    HighCVE-2020-8813

    Cacti: security vulnerability

    also in 5 other products

    		8.8
    CriticalCVE-2025-22604

    Cacti has Authenticated RCE via multi-line SNMP responses

    also in 1 other product

    		9.1
    HighCVE-2024-43362

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    also in 1 other product

    		7.3
    HighCVE-2024-43363

    Remote code execution via Log Poisoning in Cacti

    also in 1 other product

    		7.2
    HighCVE-2023-39362

    Authenticated command injection in SNMP options of a Device

    also in 2 other products

    		7.2
    CriticalCVE-2022-0730

    Cati: Improper Authentication

    also in 3 other products

    		9.8
    HighCVE-2024-43364

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    also in 1 other product

    		5.7
    HighCVE-2024-43365

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    also in 1 other product

    		5.7
    HighCVE-2019-17358

    Cacti: Deserialization of Untrusted Data

    also in 3 other products

    		8.1
    HighCVE-2023-39359

    Authenticated SQL injection vulnerability in graphs.php in Cacti

    also in 2 other products

    		8.8
    MediumCVE-2024-45598

    Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path

    also in 1 other product

    		6.0
    HighCVE-2023-39357

    A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti

    also in 2 other products

    		8.8
    CriticalCVE-2024-47875

    DOMPurify nesting-based mXSS

    also in 10 other products

    		10.0
    CriticalCVE-2024-48910

    DOMPurify vulnerable to tampering by prototype polution

    also in 1 other product

    		9.1
    MediumCVE-2020-25706

    The Cacti Group Cacti: Cross-site Scripting

    also in 2 other products

    		5.4
    MediumCVE-2020-23226

    Cacti: Cross-Site Scripting (XSS)

    also in 2 other products

    		6.1
    MediumCVE-2020-7106

    Cacti: Cross-Site Scripting (XSS)

    also in 7 other products

    		6.1
    MediumCVE-2023-49086

    Cacti is vulnerable to cross-Site scripting (XSS) DOM

    also in 1 other product

    		5.4
    MediumCVE-2023-49088

    Cacti has incomplete fix for CVE-2023-39515

    also in 1 other product

    		6.1
    HighCVE-2024-27082

    Cacti Cross-site Scripting vulnerability when managing trees

    also in 1 other product

    		7.6

    All vulnerabilities in search

    All products by Debian