CVE-2020-16157 (MEDIUM 5.4) · Watchpost

← All vulnerabilities

CVE-2020-16157

MEDIUM 5.4CVE-2020-16157 · Published 30/07/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
log server nagios	`< 2.1.7`	`2.1.7`

Description

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

References

packetstormsecurity.com/files/158992/Nagios-Log-Server-2.1.6-Cross-Site-Scripting.html · Broken Link
getastra.com/blog/911/stored-xss-vulnerability-nagios-log-server · Third Party Advisory
jinsonvarghese.com/stored-xss-vulnerability-in-nagios-log-server · Third Party Advisory
nagios.com/downloads/nagios-log-server/change-log · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free