Cross site scripting

2018-02-0616:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.3%

JSON

Cross-site scripting (XSS) vulnerability in Nagios Business Process Intelligence (BPI) before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving index.php.

CPENameOperatorVersion
business_process_intelligencelt2.3.4

CPE	Name	Operator	Version
	business_process_intelligence	lt	2.3.4

References

assets.nagios.com/downloads/exchange/nagiosbpi/CHANGELOG.txt

fortiguard.com/zeroday/FG-VD-15-011