Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-25119

Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.2%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2018-25119
  • Nagios » Fusion » Version: 4.0.0
    cpe:2.3:a:nagios:fusion:4.0.0
  • Nagios » Fusion » Version: 4.0.1
    cpe:2.3:a:nagios:fusion:4.0.1
  • Nagios » Fusion » Version: 4.1.0
    cpe:2.3:a:nagios:fusion:4.1.0
  • Nagios » Fusion » Version: 4.1.1
    cpe:2.3:a:nagios:fusion:4.1.1
  • Nagios » Fusion » Version: 4.1.2
    cpe:2.3:a:nagios:fusion:4.1.2
  • Nagios » Fusion » Version: 4.1.3
    cpe:2.3:a:nagios:fusion:4.1.3
  • Nagios » Fusion » Version: 4.1.4
    cpe:2.3:a:nagios:fusion:4.1.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved