Browse CVEs

CRITICAL 9.8 CVE-2024-13996 Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed. As a result, an… Nagios Xi 2024+ Fix from $2,3002025-10-30 CRITICAL 9.8 CVE-2024-13999 Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an a… Nagios Xi 2024+ Fix from $2,3002025-10-30 CRITICAL 9.8 CVE-2024-14003 Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins. In… Nagios Xi 2024+ Fix from $2,3002025-10-30 HIGH 8.8 CVE-2024-14004 Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf). An authenti… Nagios Xi 2024+ Fix from $1,9502025-10-30 MEDIUM 5.5 CVE-2024-14002 Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its NagVis integration. An authenticated user can suppl… Nagios Xi 2024+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2024-14000 Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Capacity Planning Report component. Insufficient validati… Nagios Xi 2024+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2024-14001 Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Executive Summary Report component. Insufficient validati… Nagios Xi 2024+ Fix from $1,6002025-10-30 CRITICAL 9.8 CVE-2024-13994 Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled. Under this configu… Nagios Xi 2024+ Fix from $2,3002025-10-30 HIGH 8.8 CVE-2024-13995 Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and… Nagios Xi 2024+ Fix from $1,9502025-10-30 HIGH 8.1 CVE-2023-7322 Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the required API permission were nevert… Log Server 2024+ Fix from $1,9502025-10-30 MEDIUM 6.1 CVE-2024-13993 Nagios XI versions prior to < 2024R1.1.2 are vulnerable to a reflected cross-site scripting (XSS) via the login page when accessed with older web bro… Nagios Xi 2024+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7321 Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely … Log Server 2.1.14+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7323 Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function. Insufficient validation or esca… Log Server 2024+ Fix from $1,6002025-10-30 HIGH 8.8 CVE-2023-7317 Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could a… Nagios Xi 2024+ Fix from $1,9502025-10-30 MEDIUM 5.4 CVE-2023-7313 Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool. Insufficient validation or escaping … Nagios Xi 5.11.3+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7314 Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component. Insufficient validation or escapi… Nagios Xi 5.11.3+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7315 Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping… Nagios Xi 5.11.3+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7316 Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping… Nagios Xi 2024+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7318 Nagios XI versions prior to < 2024R1.0.2 are vulnerable to cross-site scripting (XSS) via the Nagios Core Command Expansion page. Insufficient valida… Nagios Xi 2024+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-7319 Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calculator menu. Insufficient valida… Network Analyzer 2024+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2022-50586 Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the BPI component via the info URL field. Insufficient validation o… Nagios Xi 5.8.9+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2022-50587 Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) via the Apply Configuration error text. Insufficient validation or esc… Nagios Xi 5.8.9+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2022-50588 Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the update checking feature. Insufficient validation or escaping of… Nagios Xi 5.8.9+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2023-53688 Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) via the Hypermap Replay compone… Nagios Xi 5.11.3+ Fix from $1,6002025-10-30 HIGH 7.8 CVE-2021-47700 Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache use… Nagios Xi 5.8.7+ Fix from $1,9502025-10-30 MEDIUM 5.4 CVE-2021-47696 Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via BPI config ID handling. Insufficient validation or escaping of use… Nagios Xi 5.8.0+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2021-47697 Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via the Views feature URL handling. Insufficient validation or escapin… Nagios Xi 5.8.0+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2021-47699 Nagios XI versions prior to 5.8.7 are vulnerable to cross-site scripting (XSS) via the Audit Log page’s Send to NLS form. Insufficient validation or … Nagios Xi 5.8.7+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2022-50584 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.6 / Nagios XI 5.8.8 contains a cross-site scripting (XSS) vulnerability via the … Nagios Xi 5.8.8+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2022-50585 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.7 / Nagios XI 5.8.9 contains a cross-site scripting (XSS) vulnerability via the … Nagios Xi 5.8.9+ Fix from $1,6002025-10-30