Browse CVEs

HIGH 8.8 CVE-2021-47693 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulnerability in the search text ha… Nagios Xi 5.8.5+ Fix from $1,9502025-10-30 MEDIUM 6.1 CVE-2021-47694 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.4 / Nagios XI 5.8.6 contains a reflected cross-site scripting (XSS) vulnerabilit… Nagios Xi 5.8.6+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2021-47689 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.0 / Nagios XI 5.8.0 contais a cross-site scripting (XSS) vulnerability in the Te… Nagios Xi 5.8.0+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2021-47690 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities… Nagios Xi 5.8.2+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2021-47691 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities… Nagios Xi 5.8.2+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2021-47695 Nagios XI versions prior to 5.8.0 are vulnerable to stored cross-site scripting (XSS) via the My Tools page. Insufficient validation or escaping of u… Nagios Xi 5.8.0+ Fix from $1,6002025-10-30 HIGH 8.8 CVE-2020-36863 Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler di… Nagios Xi 5.7.2+ Fix from $1,9502025-10-30 HIGH 8.8 CVE-2020-36867 Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functionality. User-supplied values use… Nagios Xi 5.7.3+ Fix from $1,9502025-10-30 HIGH 7.8 CVE-2020-36868 Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retri… Nagios Xi 5.7.3+ Fix from $1,9502025-10-30 HIGH 7.2 CVE-2020-36869 Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitation requires an account with a… Nagios Xi 5.7.5+ Fix from $1,9502025-10-30 MEDIUM 6.1 CVE-2020-36862 Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could (1) … Nagios Xi 5.6.11+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2020-36864 Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the background color settings in Dashboards. Insufficient validati… Nagios Xi 5.7.2+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2020-36865 Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the BPI (Business Process Intelligence) component’s Config Managem… Nagios Xi 5.7.2+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2020-36866 Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin interface. Insufficient validat… Nagios Xi 5.7.2+ Fix from $1,6002025-10-30 HIGH 8.8 CVE-2020-36856 Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_test.php script. Insufficient v… Nagios Xi 5.6.14+ Fix from $1,9502025-10-30 HIGH 8.8 CVE-2020-36859 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple SQL injection vulnerabilities in the objec… Nagios Xi 5.7.4+ Fix from $1,9502025-10-30 HIGH 7.2 CVE-2020-36857 Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires a… Nagios Xi 5.6.14+ Fix from $1,9502025-10-30 MEDIUM 5.4 CVE-2020-36858 Nagios Log Server versions prior to 2.1.6 contain cross-site scripting (XSS) vulnerabilities via the web interface on the Create User, Edit User, and… Log Server 2.1.6+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2020-36860 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple cross-site scripting (XSS) vulnerabilities… Nagios Xi 5.7.4+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2020-36861 The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.8 / Nagios XI 5.7.5 contains multiple cross-site scripting (XSS) vulnerabilities… Nagios Xi 5.7.5+ Fix from $1,6002025-10-30 HIGH 8.8 CVE-2018-25122 Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The download/import handler used uns… Nagios Xi 5.4.13+ Fix from $1,9502025-10-30 HIGH 7.8 CVE-2018-25123 Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component. MRTG-related processes/scripts execute… Nagios Xi 5.5.7+ Fix from $1,9502025-10-30 MEDIUM 6.1 CVE-2017-20209 Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages. Insufficient validation or escapi… Fusion Mitigation only Fix from $1,6002025-10-30 MEDIUM 6.1 CVE-2018-25119 Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation or escap… Fusion 4.1.5+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2016-15052 Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Menu System of the web interface. Insufficient validation or e… Nagios Xi 5.2.4+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2016-15053 Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the “My Reports” listing of the web interface. Insufficient valida… Nagios Xi 5.2.4+ Fix from $1,6002025-10-30 MEDIUM 5.4 CVE-2018-25121 Nagios XI versions prior to 5.4.13 are vulnerable to cross-site scripting (XSS) via the Views page of the web interface. Insufficient validation or e… Nagios Xi 5.4.13+ Fix from $1,6002025-10-30 HIGH 8.8 CVE-2013-10073 Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a… Nagios Xi 2012+ Fix from $1,9502025-10-30 HIGH 8.8 CVE-2016-15050 Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters wer… Nagios Xi 5.2.4+ Fix from $1,9502025-10-30 MEDIUM 6.5 CVE-2013-10072 Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly rea… Nagios Xi after 2011 Fix from $1,6002025-10-30