Lucene search
+L

CVE-2018-16147

🗓️ 05 Sep 2018 21:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

The data parameter of /settings/api/router endpoint in Opsview Monitor is vulnerable to Cross-Site Scripting

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
Opsview Monitor 5.x Command Execution Vulnerability
6 Sep 201800:00
–zdt
cnvd
CNVD
Opsview Monitor Cross-Site Scripting Vulnerability (CNVD-2018-17454)
5 Sep 201800:00
–cnvd
coresecurity
Core Security
Opsview Monitor Multiple Vulnerabilities
4 Sep 201800:00
–coresecurity
cvelist
Cvelist
CVE-2018-16147
5 Sep 201821:00
–cvelist
euvd
EUVD
EUVD-2018-8002
7 Oct 202500:30
–euvd
nvd
NVD
CVE-2018-16147
5 Sep 201821:29
–nvd
osv
OSV
CVE-2018-16147
5 Sep 201821:29
–osv
packetstorm
Packet Storm
Opsview Monitor 5.x Command Execution
5 Sep 201800:00
–packetstorm
prion
Prion
Cross site scripting
5 Sep 201821:29
–prion
rapid7
Rapid7 Vulnerability Database (full)
CVE-2018-16147: Improper Neutralization of Input During Web Page Generation
5 Sep 201800:00
–rapid7
Rows per page
NVD
Node
OR
opsviewopsviewRange<5.3.1
opsviewopsviewRange5.4.0–5.4.2
ParameterPositionPathDescriptionCWE
diagnosticsb2ksypath/rest/diagnosticsb2ksy%253cscript%253ealert(1)%253c%252fscript%253ev7uol%3ffilename=1%26download=1Reflected XSS in /rest via diagnosticsb2ksy parameterCWE-79
datarequest body/settings/api/router?_dc=1521575692128Persistent XSS in Settings endpoint via data parameterCWE-79
valuerequest body/rest/config/notificationmethod/testnotification?_dc=1520444703477Remote command execution via unsanitized value parameter in notification method testCWE-79
rancid_passwordrequest body/rest/config/host/test_rancid_connection?_dc=1521569909290Command injection via rancid_password parameter in test_rancid_connectionCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 01:43Current
6.8Medium risk
Vulners AI Score6.8
CVSS 24.3
CVSS 36.1
EPSS0.01311
65