CVE-2013-6395: Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attack...

Security readout for executives and security teams

CVE-2013-6395 is a cross-site scripting issue in Ganglia Web 3.5.8 and 3.5.10. A remote attacker could inject script or HTML through the host_regex parameter. The main business risk is compromise of users who access the monitoring interface, especially if it is reachable beyond trusted administrators. Exposure is most likely where Ganglia Web 3.5.8 or 3.5.10 is deployed and accessible to users or networks an attacker can reach. Internet-facing monitoring consoles would carry higher practical risk than tightly restricted internal deployments. Treat this as a targeted remediation item for legacy monitoring infrastructure. It is not supported by active exploitation evidence in the bundle, but exposed monitoring consoles can become useful footholds for session theft or administrative misdirection. Mitigation focus: Inventory Ganglia Web deployments and identify versions 3.5.8 and 3.5.10.; Check Ganglia, Debian, and distribution advisories for fixed packages or upgrade guidance.; Restrict Ganglia Web access to trusted administrative networks or VPN paths..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.