CVE-2018-15712

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.

Score

CVSS 3.0 6.1 Medium

Status

Modified - vulnreport@tenable.com

Published

2018-11-14

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Nagios Xi (Nagios)

References

• https://www.tenable.com/security/research/tra-2018-37