← All advisories

Medium severity6.1NVD Advisory· Published Nov 14, 2018· Updated Jun 17, 2026

CVE-2018-15712

CVE-2018-15712

Description

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Nagios/XI2 versions
cpe:2.3:a:nagios:nagios_xi:5.5.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nagios:nagios_xi:5.5.6:*:*:*:*:*:*:*
- (no CPE)range: = 5.5.6
Nagios/Nagioscpe-rescue
Range: 5.5.6

Patches

Vulnerability mechanics

References

1

www.tenable.com/security/research/tra-2018-37nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.