CVE-2013-5695: Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to injec...

Security readout for executives and security teams

Opsview versions before 4.4.1 had multiple web pages that could reflect attacker-supplied script or HTML. A successful attack could run code in a victim’s browser while they use Opsview, risking session abuse, misleading actions, or data exposure inside the monitoring console. Organizations running Opsview web interface before 4.4.1 are potentially exposed. Risk depends on whether these routes are reachable by untrusted users, broad internal users, or administrators likely to follow attacker-controlled links. Prioritize remediation if Opsview is still deployed, especially where administrators use it from shared networks or the UI is internet-reachable. The issue is old, but legacy monitoring consoles often retain high operational access. Mitigation focus: Upgrade Opsview to 4.4.1 or later where applicable.; Check Opsview vendor guidance for supported fixed versions.; Restrict Opsview web access to trusted networks and required users..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.