Cross-Site Scripting Vulnerability in Nagios XI by Nagios
CVE-2022-38249

6.1MEDIUM

Key Information:

Vendor

Nagios

Status
Nagios Xi
Vendor
CVE Published:
7 September 2022

What is CVE-2022-38249?

Nagios XI v5.8.6 has been identified with a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts through the MTR component. This vulnerability could lead to unauthorized actions being performed in the context of a user's session. It is crucial for users of Nagios XI to apply the latest patches and update their configurations to mitigate potential risks associated with this security flaw.

References

https://www.nagios.com/downloads/nagios-xi/change-log/#5.8.7
x_refsource_MISC

EPSS Score

11% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.