CVE-2014-4907
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.6%
Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| op5:monitor | op5 monitor | eq | 6.3.0 |
References
docs.pnp4nagios.org/pnp-0.6/dwnld
openwall.com/lists/oss-security/2014/07/11/3
secunia.com/advisories/59535
secunia.com/advisories/59603
sourceforge.net/p/pnp4nagios/code/ci/f846a6c9d007ca2bee05359af747619151195fc9
www.op5.com/blog/news/op5-monitor-6-3-1-release-notes
www.securityfocus.com/bid/68350
bugs.op5.com/view.php?id=8761
Related
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.6%