Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libpve Storage Perl CRITICAL 9.8
CVE-2026-51080

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.

No fix yet
Fix from $2,300 2026-07-17
Virtual Environment MEDIUM 5.4
CVE-2025-57538

A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (P…

No fix yet
Fix from $1,600 2025-09-09
Virtual Environment MEDIUM 5.4
CVE-2025-57539

A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 al…

No fix yet
Fix from $1,600 2025-09-09
Virtual Environment MEDIUM 5.4
CVE-2025-57540

A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual E…

No fix yet
Fix from $1,600 2025-09-09
Proxmox Widget Toolkit MEDIUM 6.1
CVE-2023-46854

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature.

Fix: 4.0.9+
Fix from $1,600 2023-10-28
Backup Server HIGH 8.8
CVE-2023-43320

An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.…

Fix: after 8.0
Fix from $1,950 2023-09-27
Virtual Environment CRITICAL 9.0
CVE-2022-31358

A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web …

Fix: 7.2-3+
Fix from $2,300 2022-12-14
Proxmox Mail Gateway CRITICAL 9.8
CVE-2022-35508

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg…

Fix: 4.1-3+
Fix from $2,300 2022-12-04
Proxmox Mail Gateway HIGH 7.1
CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote …

Fix: 4.1-3+
Fix from $1,950 2022-12-04
Virtual Environment MEDIUM 5.3
CVE-2014-4156

Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability

Fix: 3.2+
Fix from $1,600 2020-01-27
Proxmox Mail Gateway MEDIUM 6.1
CVE-2015-9057

Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary…

Fix: after 4.0-4
Fix from $1,600 2017-05-03
Proxmox Mail Gateway MEDIUM 6.1
CVE-2015-9058

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites a…

Fix: after 4.0-4
Fix from $1,600 2017-05-03