Browse CVEs

CRITICAL 9.8 CVE-2026-51080 libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability. Libpve Storage Perl No fix yet Fix from $2,3002026-07-17 MEDIUM 5.4 CVE-2025-57538 A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (P… Virtual Environment No fix yet Fix from $1,6002025-09-09 MEDIUM 5.4 CVE-2025-57539 A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 al… Virtual Environment No fix yet Fix from $1,6002025-09-09 MEDIUM 5.4 CVE-2025-57540 A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual E… Virtual Environment No fix yet Fix from $1,6002025-09-09 MEDIUM 6.1 CVE-2023-46854 Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature. Proxmox Widget Toolkit 4.0.9+ Fix from $1,6002023-10-28 HIGH 8.8 CVE-2023-43320 An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.… Backup Server after 8.0 Fix from $1,9502023-09-27 CRITICAL 9.0 CVE-2022-31358 A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web … Virtual Environment 7.2-3+ Fix from $2,3002022-12-14 CRITICAL 9.8 CVE-2022-35508 Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg… Proxmox Mail Gateway 4.1-3+ Fix from $2,3002022-12-04 HIGH 7.1 CVE-2022-35507 A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote … Proxmox Mail Gateway 4.1-3+ Fix from $1,9502022-12-04 MEDIUM 5.3 CVE-2014-4156 Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability Virtual Environment 3.2+ Fix from $1,6002020-01-27 MEDIUM 6.1 CVE-2015-9057 Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary… Proxmox Mail Gateway after 4.0-4 Fix from $1,6002017-05-03 MEDIUM 6.1 CVE-2015-9058 Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites a… Proxmox Mail Gateway after 4.0-4 Fix from $1,6002017-05-03