Nagios: >> Nagios Xi >> 5.5.6 Security Vulnerabilities
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 parameters.
CVSS Score
6.1
EPSS Score
0.214
Published
2018-11-14
SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php.
CVSS Score
7.5
EPSS Score
0.197
Published
2013-11-26
Page 7