High severity7.2NVD Advisory· Published Sep 5, 2018· Updated Jun 17, 2026

CVE-2018-16146

Description

The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that are triggered under certain configurable events. The value parameter is not properly sanitized, leading to arbitrary command injection with the privileges of the nagios user account.

Affected products

Opsview/Opsviewllm-fuzzy
Range: <5.4.2

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2018/Sep/3nvdExploitMailing ListThird Party Advisory
www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilitiesnvdExploitThird Party Advisory
knowledge.opsview.com/v5.4/docs/whats-newnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000