CVE-2016-2058

Published: Apr 13, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page.

Affected (44)

Products: Debian: Debian Linux · Xymon: Xymon

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration B

43 vulnerable

Vulnerable Software	Affected Versions
Xymon Xymon	Version 4.1.0
Xymon Xymon	Version 4.1.1
Xymon Xymon	Version 4.1.2
Xymon Xymon	Version 4.1.2 p1
Xymon Xymon	Version 4.1.2 p2
Xymon Xymon	Version 4.2.0
Xymon Xymon	Version 4.2.2
Xymon Xymon	Version 4.2.2 rc1
Xymon Xymon	Version 4.2.3
Xymon Xymon	Version 4.2.3 rc1
Xymon Xymon	Version 4.2 alfa
Xymon Xymon	Version 4.2 beta20060605
Xymon Xymon	Version 4.2 rc20060712
Xymon Xymon	Version 4.3.0
Xymon Xymon	Version 4.3.0 beta1
Xymon Xymon	Version 4.3.0 beta2
Xymon Xymon	Version 4.3.0 beta3
Xymon Xymon	Version 4.3.0 rc1
Xymon Xymon	Version 4.3.10
Xymon Xymon	Version 4.3.11
Xymon Xymon	Version 4.3.12
Xymon Xymon	Version 4.3.13
Xymon Xymon	Version 4.3.14
Xymon Xymon	Version 4.3.15
Xymon Xymon	Version 4.3.16
Xymon Xymon	Version 4.3.17
Xymon Xymon	Version 4.3.18
Xymon Xymon	Version 4.3.19
Xymon Xymon	Version 4.3.19 rc1
Xymon Xymon	Version 4.3.1
Xymon Xymon	Version 4.3.20
Xymon Xymon	Version 4.3.21
Xymon Xymon	Version 4.3.22
Xymon Xymon	Version 4.3.23
Xymon Xymon	Version 4.3.24
Xymon Xymon	Version 4.3.2
Xymon Xymon	Version 4.3.3
Xymon Xymon	Version 4.3.4
Xymon Xymon	Version 4.3.5
Xymon Xymon	Version 4.3.6
Xymon Xymon	Version 4.3.7
Xymon Xymon	Version 4.3.8
Xymon Xymon	Version 4.3.9