Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-20139
HistoryDec 30, 2019 - 3:15 p.m.

Design/Logic Flaw

2019-12-3015:15:00
PRIOn knowledge base
www.prio-n.com
7

5.2 Medium

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.

CPENameOperatorVersion
nagios_xieq5.6.9

5.2 Medium

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

Related for PRION:CVE-2019-20139