CVE-2011-2179

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject…

published June 14, 2011

CVSS

—

EPSS

26%

Percentile

98.0

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.26037 · 98.0th percentile
Published: 2011-06-14T17:00Z

EPSS history

Timeline

14 JUN 17:00Z
Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject…
cvelistv5