Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.3 views

CVE-2016-15049

Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...

5.4CVSS6AI score0.00501EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.3 views

EUVD-2016-10798

Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...

5.1CVSS5.5AI score0.00501EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/30 9:23 p.m.5 views

CVE-2016-15049 Nagios Log Server < 1.4.2 Dashboards Logs Table XSS

Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...

5.1CVSS0.00501EPSS
Exploits0References2
CVE
CVE
added 2025/10/30 9:23 p.m.5 views

CVE-2016-15049

Nagios Log Server is affected by an XSS vulnerability in the Dashboards section, specifically when rendering log entries in the Logs table. Affected products are Nagios Log Server versions prior to 1.4.2; untrusted log content was not safely encoded for the output context, allowing attacker-contr...

5.4CVSS5.6AI score0.00501EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:23 p.m.2 views

CVE-2016-15049 Nagios Log Server < 1.4.2 Dashboards Logs Table XSS

Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...

5.1CVSS5.6AI score0.00501EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.3 views

PT-2025-44537

Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...

5.4CVSS6AI score0.00501EPSS
Exploits0References3
Rows per page
Query Builder