CVE-2019-20197

HIGH · CVSS 8.8 EPSS 22.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2019-20197

Severity

HIGH

CVSS

8.8

EPSS

22.40%

Original Filing — NVD Description

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account.