Nagios Fusion vulnerabilities

• nagios fusion Nagios Fusion < 4.0.1 XSS via Users/Servers Page CVE-2017-20209 5.1 MediumOctober 30, 2025
• nagios fusion Nagios Fusion < 4.1.5 XSS via fusionwindow Parameter CVE-2018-25119 5.1 MediumOctober 30, 2025
• nagios fusion Nagios Fusion < 4.2.0 License Information Reflected XSS CVE-2023-53689 6.0 MediumOctober 30, 2025
• nagios fusion Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS CVE-2023-53690 6.2 MediumOctober 30, 2025
• nagios fusion Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail CVE-2023-7312 6.2 MediumOctober 30, 2025
• nagios fusion Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the... CVE-2025-60425 Public exploit 8.6 HighOctober 27, 2025
• nagios fusion A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2... CVE-2025-60424 Public exploit 7.6 HighOctober 27, 2025
• nagios fusion Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated... CVE-2020-28911 6.5 MediumMay 24, 2021
• nagios fusion Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to... CVE-2020-28909 8.8 HighMay 24, 2021
• nagios fusion Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios. CVE-2020-28908 9.8 CriticalMay 24, 2021
• nagios fusion Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of... CVE-2020-28907 9.8 CriticalMay 24, 2021
• nagios fusion, xi +1 more Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier... CVE-2020-28906 8.8 HighMay 24, 2021
• nagios fusion Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to... CVE-2020-28905 EPSS 26.2% 8.8 HighMay 24, 2021
• nagios fusion Execution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege... CVE-2020-28904 9.8 CriticalMay 24, 2021
• nagios fusion Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with... CVE-2020-28903 EPSS 13.2% 6.1 MediumMay 24, 2021
• nagios fusion Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to... CVE-2020-28902 9.8 CriticalMay 24, 2021
• nagios fusion Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code... CVE-2020-28901 EPSS 11.9% 9.8 CriticalMay 24, 2021
• nagios fusion, xi +1 more Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5... CVE-2020-28900 9.8 CriticalMay 24, 2021
• nagios fusion Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335. CVE-2018-12501 6.1 MediumJune 16, 2018