Nagios Xi@5.6.9 Security Vulnerabilities and Issues — Nagios Xi@5.6.9 CVE List

Lucene search

NagiosNagios Xi5.6.9

2 matches found

CVE•added 2019/12/31 7:15 p.m.•63 views

CVE-2019-20197

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account.

9CVSS8.9AI score0.43613EPSS

CVE•added 2019/12/30 3:15 p.m.•33 views

CVE-2019-20139

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.

5.4CVSS5.1AI score0.08324EPSS