CVE-2018-10554

An issue was discovered in Nagios XI 5.4.13

published April 30, 2018

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in (1) the Schedule New Report screen via the hour, minute, or ampm parameter, related to components/scheduledreporting; (2) includes/components/xicore/downtime.php, related to the update_pages function; (3) the ajaxhelper.php opts or background parameter; (4) the i[] array parameter to ajax_handler.php; or (5) the deploynotification.php title parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02616 · 85.2th percentile
Published
2018-04-30T03:00Z
EPSS history
Timeline
  • 30 APR 03:00Z
    An issue was discovered in Nagios XI 5.4.13
    cvelistv5