← All advisories

Medium severity6.1NVD Advisory· Published Sep 5, 2018· Updated Jun 17, 2026

CVE-2018-16147

CVE-2018-16147

Description

The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.

Affected products

2

Opsview/Opsview2 versions
cpe:2.3:a:opsview:opsview:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opsview:opsview:*:*:*:*:*:*:*:*range: <5.3.1
- (no CPE)range: <5.3.1, >=5.4.0 <5.4.2

Patches

Vulnerability mechanics

References

4

seclists.org/fulldisclosure/2018/Sep/3nvdExploitMailing ListThird Party Advisory
www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilitiesnvdExploitThird Party Advisory
knowledge.opsview.com/v5.3/docs/whats-newnvdRelease NotesVendor Advisory
knowledge.opsview.com/v5.4/docs/whats-newnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.