Vulnerability Name: | CVE-2015-3618 (CCN-139769) | ||||||||||||
Assigned: | 2015-03-04 | ||||||||||||
Published: | 2015-03-04 | ||||||||||||
Updated: | 2018-02-26 | ||||||||||||
Summary: | Cross-site scripting (XSS) vulnerability in Nagios Business Process Intelligence (BPI) before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving index.php. | ||||||||||||
CVSS v3 Severity: | 6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) 5.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:U/RC:R)
5.9 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:U/RC:R)
| ||||||||||||
CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
| ||||||||||||
Vulnerability Type: | CWE-79 | ||||||||||||
Vulnerability Consequences: | Cross-Site Scripting | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2015-3618 Source: CONFIRM Type: Release Notes, Vendor Advisory https://assets.nagios.com/downloads/exchange/nagiosbpi/CHANGELOG.txt Source: CCN Type: Nagios Web site Nagios Business Process Intelligence (BPI) - Nagios Exchange Source: XF Type: UNKNOWN bpi-cve20153618-xss(139769) Source: CCN Type: FortiGuard Advisory FG-VD-15-011 Fortinet Discovers Nagios Business Process Intelligence Cross-Site Scripting (XSS) Vulnerability Source: MISC Type: Third Party Advisory https://fortiguard.com/zeroday/FG-VD-15-011 | ||||||||||||
Vulnerable Configuration: | Configuration 1:![]() | ||||||||||||
BACK |