Back to search
CVE-2016-15049
Published: Oct 30, 2025
Modified: Nov 17, 2025
PUBLISHED
Description
Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.
| Vendor | Product | Versions |
|---|---|---|
Nagios | Log Server | affected 0 - < 1.4.2 |
Weaknesses (CWE)
References
https://www.nagios.com/changelog/nagios-log-server-2024r1/
release-notes
patch
https://www.vulncheck.com/advisories/nagios-log-server-dashboards-logs-table-xss
third-party-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now