Vulnerability in Nagios Xi

CVE-2018-15712

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.

EPSS: 0.268 (96.5th percentile) — read the EPSS interpretation.