Virtualmin

9 CVEs across 1 Virtualmin products. Browse Virtualmin vulnerabilities, severities, and proof-of-concept exploits.

Virtualmin products with known CVEs

ProductCVEs
Virtualmin9
Virtualmin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-45692High7.52024-09-04Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.
CVE-2023-47099Medium5.42023-11-01A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML…
CVE-2023-47098Medium4.82023-11-01A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject a…
CVE-2023-47097Medium5.42023-11-01A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web…
CVE-2023-47096Medium5.42023-11-01A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject a…
CVE-2023-47095Medium5.42023-11-01A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attack…
CVE-2023-47094Medium5.42023-11-01A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web…
CVE-2018-18208Medium6.12018-10-10Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.
CVE-2018-18207Medium6.12018-10-10Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.