CVE-2025-57540
Published Sep 9, 2025A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4. Authenti…
Vendor/product archive
proxmox / virtual_environment CVEs
Beta · best-effort8 CVEs tagged to proxmox / virtual_environment — 2 Critical, 2 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2025-57539
Published Sep 9, 2025A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to st…
CVE-2025-57538
Published Sep 9, 2025A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an authenticate…
CVE-2023-43320
Published Sep 27, 2023An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authentica…
CVE-2022-31358
Published Dec 14, 2022A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existe…
CVE-2022-35508
Published Dec 4, 2022Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an u…
CVE-2022-35507
Published Dec 4, 2022A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a…
CVE-2014-4156
Published Jan 27, 2020Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability
Showing 1-8 of 8 CVEsPage 1 of 1