Vulnerability in Nagios Xi

CVE-2018-15714

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 parameters.

EPSS: 0.214 (95.8th percentile) — read the EPSS interpretation.