Vulnerability in N/a

CVE-2020-15902

Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.

EPSS: 0.563 (98.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2020-15902

References

www.nagios.com/downloads/nagios-xi/change-log/ (x_refsource_MISC)
www.nagios.com/products/security/ (x_refsource_MISC)
insinuator.net/2020/07/security-advisories-for-nagios-xi/ (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-15902?: CVE-2020-15902 is a vulnerability in N/a. Published 2020-07-22.
Is CVE-2020-15902 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.