Test ID:	1.3.6.1.4.1.25623.1.0.106710
Category:	Web application abuses
Title:	Icinga XSS Vulnerability
Summary:	Icinga is prone to a cross-site scripting vulnerability.
Description:	Summary: Icinga is prone to a cross-site scripting vulnerability. Vulnerability Insight: Cross-site scripting vulnerability in the Classic-UI with the CSV export link and pagination feature allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi. Affected Software/OS: Icinga prior to 1.14.0. Solution: Update 1.14.0 or later versions. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8010 BugTraq ID: 97145 http://www.securityfocus.com/bid/97145 http://www.openwall.com/lists/oss-security/2015/10/23/15 http://www.openwall.com/lists/oss-security/2015/10/29/15 SuSE Security Announcement: openSUSE-SU-2017:0146 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00019.html
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.