NVD

Id
8999  
Name
CVE-2011-2179  
Description
Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-06-14  
Modified Date
2011-11-21  
Seq
2011-2179  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51627 8999 CVE-2011-2179 20110601 Cross-Site Scripting vulnerability in Icinga  View
51628 8999 CVE-2011-2179 20110601 Cross-Site Scripting vulnerability in Nagios  View
51629 8999 CVE-2011-2179 8274  View
51630 8999 CVE-2011-2179 http://tracker.nagios.org/view.php?id=224  View
51631 8999 CVE-2011-2179 [oss-security] 20110601 CVE request: XSS in nagios  View
51632 8999 CVE-2011-2179 [oss-security] 20110602 Re: CVE request: XSS in nagios  View
51633 8999 CVE-2011-2179 http://www.rul3z.de/advisories/SSCHADV2011-005.txt  View
51634 8999 CVE-2011-2179 http://www.rul3z.de/advisories/SSCHADV2011-006.txt  View
51635 8999 CVE-2011-2179 48087  View
51636 8999 CVE-2011-2179 USN-1151-1  View
51637 8999 CVE-2011-2179 icinga-expand-xss(67797)  View
51638 8999 CVE-2011-2179 https://bugzilla.redhat.com/show_bug.cgi?id=709871  View
51639 8999 CVE-2011-2179 https://dev.icinga.org/issues/1605  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31706 JVNDB-2011-001946 Nagios および Icinga におけるクロスサイトスクリプティングの脆弱性 Nagios および Icinga の config.cgi 内にある config.c には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-2179 50086 CVE-2011-2179 8999 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001946.html 2011-06-01 2011-07-27 View