CVE-2018-17146

—

CVSS 3.0

5.4 medium

EPSS

4%p89

Published

Jun 19, 2019 (Jun 19, 2019)

Modified

Jun 17, 2026

Description

A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript code within the auto login admin management page.

Vendors: nagios
Products: nagios xi
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.