CVE-2021-33179

State: Published
Severity: Not scored
Published: Oct 14, 2021
Updated: Aug 3, 2024
Reserved: May 18, 2021

Description

The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
Nagios XINagios	<5.8.4Affected

References

https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.