2 matches found
CVE-2020-15901
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.