Security Advisory
CVE-2018-15712
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.