CVE-2020-22427

Katalog CVE

CVSS 7.2 · High EPSS 14,3%

Kerentanan pada nagios xi. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NOTE: the vendor disputes whether the CVE and its references are actionable because all technical details are omitted, and the only option is to pay for a subscription service where technical details may be disclosed at an unspecified later time

Rincian

Terbit di NVD

15 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

14,3% peluang dieksploitasi; lebih tinggi dari 96,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://code610.blogspot.com/2020/03/postauth-rce-bugs-in-nagiosxi-5611.html exploit · advisory pihak ketiga