What’s Vulnerable › Vulnerabilities

CVE-2018-17147

• Severity: medium (CVSS 4.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-10 · updated 2026-06-17
• Weakness: CWE-79

Description

Nagios XI before 5.5.4 has XSS in the auto login admin management page.

Affected products

• Nagios XI: before 5.5.4 — fixed in 5.5.4

How to fix

Upgrade to a fixed version: Nagios XI 5.5.4. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/109116
• https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
• http://www.securityfocus.com/bid/109116
• https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT

Get alerted when CVE-2018-17147 or the next vulnerability affects your stack