system
Describe <CVE-2019-20139>.
user
What is <CVE-2019-20139>?
assistant
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user..