Opsview : Security Vulnerabilities, CVEs, (XSS)
The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.
Max CVSS
6.1
EPSS Score
0.17%
Published
2018-09-05
Updated
2018-11-13
The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.
Max CVSS
6.1
EPSS Score
0.17%
Published
2018-09-05
Updated
2018-11-13
Opsview before 2015-11-06 has XSS via SNMP.
Max CVSS
6.1
EPSS Score
0.16%
Published
2017-04-10
Updated
2017-04-13
Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) crafted check plugin, the (2) description in a host profile, or the (3) plugin_args parameter to a Test service check page.
Max CVSS
4.3
EPSS Score
0.19%
Published
2015-06-18
Updated
2016-06-15
Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
4.3
EPSS Score
0.19%
Published
2014-01-03
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/auditlog/, (2) PATH_INFO to info/host/ or (3) viewport/, (4) back parameter to login, or (5) "from" parameter to status/service/recheck.
Max CVSS
4.3
EPSS Score
0.13%
Published
2013-11-05
Updated
2013-11-07
Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML.
Max CVSS
6.1
EPSS Score
0.12%
Published
2020-01-02
Updated
2020-01-08
7 vulnerabilities found