CVE-2020-16157

概要

参考情報

• packetstormsecurity.com/files/158992/Nagios-Log-Server-2.1.6-Cross-Site-Scripting.html · Broken Link
• getastra.com/blog/911/stored-xss-vulnerability-nagios-log-server · Third Party Advisory
• jinsonvarghese.com/stored-xss-vulnerability-in-nagios-log-server · Third Party Advisory
• nagios.com/downloads/nagios-log-server/change-log · Release Notes

log server のその他の脆弱性

• CVE-2025-34323高 7.8Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration an…
• CVE-2025-34322高 7.2Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Languag…
• CVE-2025-34298高 8.8Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow. A user cou…
• CVE-2025-34277緊急 9.8Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly v…
• CVE-2025-34274緊急 9.8Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logsta…