CVE-2019-20139
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 26%
exploitation probability
26%top 2% of all CVEs
observed exploitation
nono source reports it
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.
Affected products
n/a · n/a