CVE-2018-25119

概要

参考情報

• nagios.com/changelog/nagios-fusion · Release Notes
• vulncheck.com/advisories/nagios-fusion-xss-via-fusionwindow-parameter · Third Party Advisory

fusion のその他の脆弱性

• CVE-2023-7312中 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. U…
• CVE-2023-53690中 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configu…
• CVE-2023-53689中 4.8Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow tha…
• CVE-2017-20209中 6.1Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages. Insufficient validation …
• CVE-2025-60425高 8.6Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enab…