CVE-2013-10074
30.10.2025, 22:15
Nagios XI versions prior to2012R2.6are vulnerable to cross-site scripting (XSS) via the Tools Menu of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
| Vendor | Product | Version |
|---|---|---|
| nagios | nagios_xi | 𝑥 < 2012 |
| nagios | nagios_xi | 2012r1.6:r1.6 |
| nagios | nagios_xi | 2012r1.7:r1.7 |
| nagios | nagios_xi | 2012r1.8:r1.8 |
| nagios | nagios_xi | 2012r1.9:r1.9 |
| nagios | nagios_xi | 2012r2.0:r2.0 |
| nagios | nagios_xi | 2012r2.1:r2.1 |
| nagios | nagios_xi | 2012r2.2:r2.2 |
| nagios | nagios_xi | 2012r2.3:r2.3 |
| nagios | nagios_xi | 2012r2.4:r2.4 |
| nagios | nagios_xi | 2012r2.4:r2.4 |
| nagios | nagios_xi | 2012r2.5:r2.5 |
𝑥
= Vulnerable software versions