Mmonit Monit vulnerabilities
2 vulnerabilities
Known vulnerabilities in Mmonit Monit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2019-11454canonical · ubuntu_linux +6 morecanonical ubuntu_linuxPersistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an _viewlog operation.CVSS6.1MediumEPSS2.41%RoutineCVE-2016-7067tildeslash ltd. · monit +4 moretildeslash ltd. monitMonit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.CVSS6.5MediumEPSS0.88%