CVE-2018-15712

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php

published November 14, 2018

CVSS
—
EPSS
49%
Percentile
98.9
In the wild
Unconfirmed
What it is

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.48555 · 98.9th percentile
Published
2018-11-14T18:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 49% → 21%
    epss
  • 06 SEP 03:11Z
    EPSS moved 49% → 21%
    epss
  • 30 AUG 16:00Z
    EPSS moved 21% → 49%
    epss
  • 29 AUG 04:34Z
    EPSS moved 49% → 21%
    epss
  • 14 NOV 18:00Z
    Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php
    cvelistv5