CVE-2021-35478

5.4 mediumEPSS 77%

Medium (5.4) in nagios log server. EPSS 77% chance of exploitation in the next 30 days.

Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 77% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nagios:log_server

References

https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479/
https://research.nccgroup.com/?research=Technical%20advisories
https://www.nagios.com/downloads/nagios-log-server/change-log/
https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479/
https://research.nccgroup.com/?research=Technical%20advisories

Check your stack JSON