PR
Vendor
Proxmox
28
CVEs
0
On KEV
0
New 30D
Products
VE9.8
Virtual Environment
Proxmox
9 CVEs0 on KEV0 new
PM9.8
Proxmox Mail Gateway
Proxmox
5 CVEs0 on KEV0 new
LI9.8
libpve-storage-perl
Proxmox
2 CVEs0 on KEV0 new
MG8.2
Mail Gateway
Proxmox
2 CVEs0 on KEV0 new
PM8.2
pmg-api
Proxmox
2 CVEs0 on KEV0 new
PH9.8
Pve Http Server
Proxmox
2 CVEs0 on KEV0 new
BS8.8
Backup Server
Proxmox
1 CVEs0 on KEV0 new
LP8.2
libpve-common-perl (Promox Mail Gateway 8)
Proxmox
1 CVEs0 on KEV0 new
LP8.2
libpve-common-perl (Promox VE 8)
Proxmox
1 CVEs0 on KEV0 new
LI8.2
libpve-http-server-perl
Proxmox
1 CVEs0 on KEV0 new
PR6.1
Proxmox-widget-toolkit
Proxmox
1 CVEs0 on KEV0 new
PV8.2
pve-manager
Proxmox
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94588 | PM pmg-api Proxmox | 4.4 | Sep 21 | In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality |
| CVE-2026-51080 | LI Libpve-storage-perl Proxmox | 9.8 | Jul 17 | libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability |
| CVE-2025-57540 | VE Virtual Environment Proxmox | 5.4 | Sep 9 | A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4 |
| CVE-2025-57539 | VE Virtual Environment Proxmox | 5.4 | Sep 9 | A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to… |
| CVE-2025-57538 | VE Virtual Environment Proxmox | 5.4 | Sep 9 | A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an… |
| CVE-2024-21545 | LI libpve-storage-perl Proxmox | 8.2 | Sep 24 | Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization |
| CVE-2023-46854 | PR Proxmox-widget-toolkit Proxmox | 6.1 | Oct 28 | Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature |
| CVE-2023-43320 | BS Backup Server Proxmox | 8.8 | Sep 27 | An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote… |
| CVE-2022-31358 | VE Virtual Environment Proxmox | 9.0 | Dec 14 | A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via… |
| CVE-2022-35508 | PM Proxmox Mail Gateway Proxmox | 9.8 | Dec 4 | Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon |
| CVE-2022-35507 | PM Proxmox Mail Gateway Proxmox | 7.1 | Dec 4 | A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a… |
| CVE-2014-4156 | VE Virtual Environment Proxmox | 5.3 | Jan 27 | Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability |
| CVE-2015-9058 | PM Proxmox Mail Gateway Proxmox | 6.1 | May 3 | Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… |
| CVE-2015-9057 | PM Proxmox Mail Gateway Proxmox | 6.1 | May 3 | Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via… |
| CVE-2014-2325 | MG Mail Gateway Proxmox | – | Mar 14 | Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the (1) state… |