Vulnerability · Published Oct 14, 2021 · Assigned by SNPS
CVE-2021-33179
Medium 6.1
In plain English
A medium-severity cross-site scripting in Nagios XI from Nagios. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 11.7% (higher than 96% of all known vulnerabilities).
Severity (CVSS NVD)6.1Medium
Exploit odds (30 days)11.7%top 3.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload.
Affected products (as reported)
Weakness: CWE-79