CVE-2019-20139

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter

published December 30, 2019

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26112 · 98.0th percentile
Published
2019-12-30T14:57Z
EPSS history
Timeline
  • 30 DEC 14:57Z
    In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter
    cvelistv5