Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xkkm-ss3p-1udc
Vulnerability ID VCID-xkkm-ss3p-1udc
Aliases CVE-2023-46490
Summary SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
epss 0.00207 https://api.first.org/data/v1/epss?cve=CVE-2023-46490
ssvc Track https://gist.github.com/ISHGARD-2/a95632111138fcd7ccf7432ccb145b53
ssvc Track https://github.com/Cacti/cacti/security/advisories/GHSA-f4r3-53jr-654c
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-46490
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46490
1059286 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059286
a95632111138fcd7ccf7432ccb145b53 https://gist.github.com/ISHGARD-2/a95632111138fcd7ccf7432ccb145b53
GHSA-f4r3-53jr-654c https://github.com/Cacti/cacti/security/advisories/GHSA-f4r3-53jr-654c
No exploits are available.
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T14:48:55Z/ Found at https://gist.github.com/ISHGARD-2/a95632111138fcd7ccf7432ccb145b53
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T14:48:55Z/ Found at https://github.com/Cacti/cacti/security/advisories/GHSA-f4r3-53jr-654c
Exploit Prediction Scoring System (EPSS)
Percentile 0.43071
EPSS Score 0.00207
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:36:48.805500+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0