ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score

1 result for “CVE-2020-36858”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36858
Published
2025-10-30
CVSS:
5.1
ShadowTrackr CVSS:
1.2
Summary:
Nagios Log Server versions prior to 2.1.6 contain cross-site scripting (XSS) vulnerabilities via the web interface on the Create User, Edit User, and Manage Host Lists pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.