Vulnerabilities (CVE)

Filtered by vendor Nagios Subscribe
Filtered by product Log Server
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25385 1 Nagios 1 Log Server 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapshot_name parameter, which may impact users who open a maliciously crafted link or third-party web page.
CVE-2020-16157 1 Nagios 1 Log Server 2024-11-21 3.5 LOW 5.4 MEDIUM
A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.
CVE-2019-15898 1 Nagios 1 Log Server 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.