HOMEVULNERABILITIESVENDORSPacketfence

PacketfenceCVEs & Vulnerabilities

5 CVEs affecting Packetfence products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

packetfence 5
CVE-2011-4069CRITICAL

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username.

1 Feb 2018
9.8
CVSS
CVE-2011-4068CRITICAL

The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password.

1 Feb 2018
9.8
CVSS
CVE-2012-4742HIGH

The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors.

1 Sep 2012
7.5
CVSS
CVE-2012-4741MEDIUM

The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute.

1 Sep 2012
5.0
CVSS
CVE-2012-4740MEDIUM

Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

1 Sep 2012
4.3
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database