VE
Product
Virtual Environment
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 4Low 0
Watch
Add Virtual Environment to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35508 | 9.8 | Dec 4 | Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon Affected: All versions, or not specified |
| CVE-2022-31358 | 9.0 | Dec 14 | A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via… Affected: before 7.2-3 |
| CVE-2023-43320 | 8.8 | Sep 27 | An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote… Affected: 5.4 through 8.0 |
| CVE-2024-21545 | 8.2 | Sep 24 | Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization Affected: 6.0 before 7.3; 8.0 before 8.2-2 |
| CVE-2022-35507 | 7.1 | Dec 4 | A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a… Affected: All versions, or not specified |
| CVE-2025-57540 | 5.4 | Sep 9 | A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4 Affected: 8.4 |
| CVE-2025-57538 | 5.4 | Sep 9 | A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an… Affected: 8.4 |
| CVE-2025-57539 | 5.4 | Sep 9 | A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to… Affected: 8.4 |
| CVE-2014-4156 | 5.3 | Jan 27 | Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability Affected: before 3.2 |
Showing 9