CyberRota Analysis
AI analysis pending.
CVE
CVE-2019-20139
Severity
MEDIUM
CVSS
5.4
EPSS
26.11%
Original NVD Description
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.