CVE-2018-16148 - The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting

MEDIUM

The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting

Published Sep 5, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 1.31%

The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://knowledge.opsview.com/v5.3/docs/whats-new		x_refsource_CONFIRMRelease NotesVendor Advisory
https://knowledge.opsview.com/v5.4/docs/whats-new		x_refsource_CONFIRMRelease NotesVendor Advisory
https://seclists.org/fulldisclosure/2018/Sep/3		mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory
https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities		x_refsource_MISCExploitThird Party Advisory