CVE-2021-33179

2021-10-1414:57:17

CWE-79

SNPS

www.cve.org

nagios xi

authenticated

cross-site scripting

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

73.5%

JSON

The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload.

CNA Affected

[
  {
    "product": "Nagios XI",
    "vendor": "Nagios",
    "versions": [
      {
        "status": "affected",
        "version": "<5.8.4"
      }
    ]
  }
]

References

www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi