CVE-2011-1523

Опубликовано: 09 мар. 2011

Источник: redhat

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

Отчет

This issue affects the Red Hat HPC Solution which is End of Life. For more information please refer to: https://access.redhat.com/support/policy/updates/hpc/

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat HPC Solution 1.2	nagios	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=690877Nagios: XSS in the network status map CGI

EPSS

Процентиль: 71%

0.0067

Низкий

3.5 Low

CVSS2

Связанные уязвимости

CVE-2011-1523

ubuntu

больше 14 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

CVE-2011-1523

nvd

больше 14 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

CVE-2011-1523

debian

больше 14 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.c ...

GHSA-6867-mm47-7j8j

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

EPSS

Процентиль: 71%

0.0067

Низкий

3.5 Low

CVSS2