CVE-2018-17146

A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page

published June 19, 2019

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript code within the auto login admin management page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03542 · 89.2th percentile
Published
2019-06-19T17:25Z
EPSS history
Timeline
  • 19 JUN 17:25Z
    A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page
    cvelistv5