Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xymon 跨站脚本漏洞
Vulnerability Description
Xymon是一套开源的、跨平台的网络监控应用程序。该应用程序可通过网页查看各服务器的运行状态，并支持Email及短信通知功能。 Xymon中存在跨站脚本漏洞。远程攻击者可借助detailed status页面中未正确处理的status消息和status页面中未正确处理的acknowledgement消息，利用该漏洞注入任意Web脚本或HTML。以下版本受到影响：Xymon 4.1.x版本，4.2.x版本，4.3.25之前4.3.x版本。
CVSS Information
N/A
Vulnerability Type
N/A