Nagios Log Server vulnerabilities

• nagios log server Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules CVE-2025-34323 8.5 HighNovember 17, 2025
• nagios log server Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries CVE-2025-34322 Public exploit 8.6 HighNovember 17, 2025
• nagios log server Nagios Log Server < 2.1.14 XSS via Snapshots Page CVE-2023-7321 5.1 MediumOctober 30, 2025
• nagios log server Nagios Log Server < 2024R1 XSS via Create User Function CVE-2023-7323 5.1 MediumOctober 30, 2025
• nagios log server Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages CVE-2020-36858 5.1 MediumOctober 30, 2025
• nagios log server Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation CVE-2025-34298 8.7 HighOctober 30, 2025
• nagios log server Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID CVE-2025-34277 9.4 CriticalOctober 30, 2025
• nagios log server Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback CVE-2025-34272 5.3 MediumOctober 30, 2025
• nagios log server Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion CVE-2025-34273 7.1 HighOctober 30, 2025
• nagios log server Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root CVE-2024-58273 8.5 HighOctober 30, 2025
• nagios log server Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges CVE-2025-34274 9.3 CriticalOctober 30, 2025
• nagios log server Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access CVE-2023-7322 8.7 HighOctober 30, 2025
• nagios log server Nagios Log Server < 1.4.2 Dashboards Logs Table XSS CVE-2016-15049 5.1 MediumOctober 30, 2025
• nagios log server Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext CVE-2025-34271 8.7 HighOctober 30, 2025
• nagios log server Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated CVE-2025-34270 6.9 MediumOctober 30, 2025
• nagios log server Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to... CVE-2025-44824 8.5 HighOctober 7, 2025
• nagios log server Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext... CVE-2025-44823 Public exploit EPSS 16.9% 9.9 CriticalOctober 7, 2025
• nagios log server Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to... CVE-2025-29471 Public exploit 8.3 HighApril 15, 2025
• nagios log server Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert... CVE-2021-35479 EPSS 13.2% 5.4 MediumJuly 27, 2021
• nagios log server Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history... CVE-2021-35478 EPSS 76.6% 5.4 MediumJuly 27, 2021
• nagios log server Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver... CVE-2020-25385 EPSS 16.4% 6.1 MediumJanuary 20, 2021
• nagios log server A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods ... CVE-2020-16157 EPSS 14.4% 5.4 MediumJuly 30, 2020
• nagios log server Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. CVE-2019-15898 6.1 MediumSeptember 3, 2019