Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 97.7%.
XSS
PHP
Nagios Xi
NVD
GitHub
VulDB
CVSS 3.1
6.1
EPSS
97.7%
Threat
5.7
The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
Request Smuggling
Python
Information Disclosure
Fedora
Debian Linux
+9
NVD
GitHub
CVSS 3.1
5.9
EPSS
36.0%