HTTP: Nagios XI Graph Explorer visFunctions.inc.php Cross-Site Scripting
This signature detects attempts to exploit a known cross-site scripting vulnerability against Nagios XI. It is due to insufficient validation of user-supplied input. Attackers can steal cookie-based authentication credentials and launch other attacks.
Extended Description
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.
Affected Products
Nagios nagios_xi
References
CVE: CVE-2020-15902
Short Name
HTTP:XSS:NAGIOS-XI-XSS
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2020-15902 Cross-Site Explorer Graph Nagios Scripting XI visFunctions.inc.php
Release Date
10/21/2020
Supported Platforms
srx-branch-12.3
srx-branch-19.3
vsrx3bsd-19.2
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
srx-19.4
vsrx-12.3
srx-12.3
vsrx-19.2
srx-19.3
vmx-19.4
mx-12.3
mx-19.4
mx-19.3
vmx-19.3
Sigpack Version
3716
False Positive
Unknown
Vendors
Nagios
CVSS Score
4.3