CVE-2019-20139 - In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter

Back Back to CVE browser

MEDIUM

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter

Published Dec 30, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 26.11%

Description

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://code610.blogspot.com/2019/12/multiple-xss-bugs-in-nagios-569.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://code610.blogspot.com/2019/12/multiple-xss-bugs-in-nagios-569.html		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 30, 2019

Updated Aug 5, 2024

Reserved Dec 30, 2019

Link CVE-2019-20139

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20139

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-20139