CVE-2018-10737

Published: 16 May 2018

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.

Priority

CVSS 3 base score: 7.2

Status

Package	Release	Status
nagios3 Launchpad, Ubuntu, Debian	artful	Not vulnerable (file not present)
	bionic	Not vulnerable (file not present)
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected [file not present])
	upstream	Needs triage
	xenial	Not vulnerable (file not present)

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.