| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | = 5.6.9 |
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free