Nagios XI < 5.5.0 Multiple Vulnerabilities

Nagios XI is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagiosxi"; if description...

CVE-2018-10554

Nagios XI 5.4.13 contains a Cross‑Site Scripting (XSS) flaw that is exploitable via CSRF. The issue affects multiple vectors: (1) Schedule New Report page parameters (hour, minute, ampm) in components/scheduledreporting; (2) includes/components/xicore/downtime.php via update_pages; (3) ajaxhelper...