CVE-2016-6209

Published: 31 March 2017

Cross-site scripting (XSS) vulnerability in Nagios.

Priority

CVSS 3 base score: 6.1

Status

Package	Release	Status
icinga Launchpad, Ubuntu, Debian	artful	Not vulnerable (corewindow not supported)
	bionic	Not vulnerable (corewindow not supported)
	cosmic	Not vulnerable (corewindow not supported)
	disco	Not vulnerable (corewindow not supported)
	eoan	Not vulnerable (corewindow not supported)
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	precise	Does not exist (precise was not-affected [corewindow not supported])
	trusty	Does not exist (trusty was not-affected [corewindow not supported])
	upstream	Not vulnerable (corewindow not supported)
	wily	Not vulnerable (corewindow not supported)
	xenial	Not vulnerable (corewindow not supported)
	yakkety	Not vulnerable (corewindow not supported)
	zesty	Not vulnerable (corewindow not supported)
nagios3 Launchpad, Ubuntu, Debian	artful	Ignored (reached end-of-life)
	bionic	Needed
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	precise	Does not exist (precise was deferred [2018-04-20])
	trusty	Does not exist (trusty was deferred [2018-04-20])
	upstream	Needed
	wily	Ignored (reached end-of-life)
	xenial	Needed
	yakkety	Ignored (reached end-of-life)
	zesty	Ignored (reached end-of-life)

Author	Note
mdeslaur	upstream fix disables functionnality