CVE-2007-5624

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-23 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts.

Affected products

Nagios Enterprises nagios: through 2.9

References

http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
http://secunia.com/advisories/27316
http://secunia.com/advisories/27980
http://www.mandriva.com/security/advisories?name=MDVSA-2008:067
http://www.nagios.org/development/changelog.php#2x_branch
http://www.securityfocus.com/bid/26152
http://www.vupen.com/english/advisories/2007/3567
https://bugzilla.redhat.com/show_bug.cgi?id=362791
https://bugzilla.redhat.com/show_bug.cgi?id=362801
https://exchange.xforce.ibmcloud.com/vulnerabilities/37350
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00125.html
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00161.html

Get alerted when CVE-2007-5624 or the next vulnerability affects your stack