CVE-2022-38249

Опубликовано: 08 сент. 2022

Источник: redhat

CVSS3: 6.1

EPSS Низкий

Описание

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4.

Отчет

Red Hat Gluster Storage (RHGS) 3.5 no longer supports monitoring using Nagios. Red Hat Gluster Storage Web Administration is now the recommended monitoring tool for Red Hat Storage Gluster clusters, hence the Nagios package provided by RHGS will not be fixed.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Storage 3	nagios	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=2135644nagios: cross-site scripting (XSS) vulnerability via the MTR component

EPSS

Процентиль: 78%

0.01845

Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVE-2022-38249

CVSS3: 6.1

ubuntu

около 4 лет назад

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4.

CVE-2022-38249

CVSS3: 6.1

nvd

около 4 лет назад

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4.

GHSA-m6r4-p392-94hc

CVSS3: 6.1

github

около 4 лет назад

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4.

EPSS

Процентиль: 78%

0.01845

Низкий

6.1 Medium

CVSS3