2 matches found
CVE-2017-20209
Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting XSS via the Users and Servers pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
6.1CVSS6.2AI score0.00481EPSS
SaveExploits0References1
EUVD-2017-18925
Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting XSS via the Users and Servers pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
5.1CVSS5.6AI score0.00481EPSS
SaveExploits0References3
20