CVE-2018-15712

Publication date

2018-11-14 18:00:00

Family

tenable

State

PUBLISHED

Description

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.