CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java.
CVE
CVE-2024-13992
Severity
MEDIUM
CVSS
5.4
EPSS
0.55%
Java
Original NVD Description
Nagios XI versions prior to < 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the "missing page" (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain.
Related CVEs
Other vulnerabilities affecting the same vendor(s)