Skip to contentNagios Xi vulnerabilities
- nagios xiA SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with...CVE-2023-40933Public exploit8.8 High
- nagios xiA Cross-site scripting (XSS) vulnerability in Nagios XI version 5.11.1 and below allows...CVE-2023-409325.4 Medium
- nagios xiA SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows...CVE-2023-40931Public exploitEPSS 11.9%6.5 Medium
- nagios xiCross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via...CVE-2020-239926.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2022-382474.8 Medium
- nagios xiNagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS)...CVE-2022-382486.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name...CVE-2022-382509.8 Critical
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR...CVE-2022-382496.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2022-382514.8 Medium
- nagios xiNagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via...CVE-2022-382546.1 Medium
- nagios xiIn Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that...CVE-2022-292726.1 Medium
- nagios xiIn Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is...CVE-2022-292716.5 Medium
- nagios xiIn Nagios XI through 5.8.5, it is possible for a user without password verification to change his...CVE-2022-292704.3 Medium
- nagios xiIn Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to...CVE-2022-292696.5 Medium
- nagios xiAn issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an...CVE-2021-40344EPSS 64.8%7.2 High
- nagios xiAn issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagios_unbundler.py...CVE-2021-403437.8 High
- nagios xiAn issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an...CVE-2021-40345Public exploitEPSS 22.7%7.2 High
- nagios xiThe general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated...CVE-2021-33179EPSS 11.7%6.1 Medium
- nagios xiThe Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL...CVE-2021-33177EPSS 10.1%8.8 High
- nagios xiNagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability...CVE-2021-372236.5 Medium
- nagios xiNagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards.CVE-2021-363669.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.CVE-2021-363659.8 Critical
- nagios xiNagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards.CVE-2021-363649.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.CVE-2021-363639.8 Critical
- nagios xiIn Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative...CVE-2021-38156EPSS 92.9%5.4 Medium
- nagios xiA path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component...CVE-2021-37343Public exploitEPSS 23.8%8.8 High
- nagios xi switch wizardNagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through...CVE-2021-37344EPSS 96.8%9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is...CVE-2021-373457.8 High
- nagios xi watchguard wizardNagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through...CVE-2021-37346EPSS 73.6%9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh...CVE-2021-373477.8 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation...CVE-2021-373487.5 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php...CVE-2021-373497.8 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications...CVE-2021-37350EPSS 79.2%9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated...CVE-2021-373515.3 Medium
- nagios xiAn open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to...CVE-2021-373526.1 Medium
- nagios xi docker wizardNagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in...CVE-2021-373539.8 Critical
- nagios xiNagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper...CVE-2021-3277EPSS 59.0%7.2 High
- nagios xiCreation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows...CVE-2020-289109.8 Critical
- nagios fusion, xi +1 moreIncorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier...CVE-2020-289068.8 High
- nagios fusion, xi +1 moreInsufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5...CVE-2020-289009.8 Critical
- nagios xiNagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php...CVE-2021-32737.2 High
- nagios xiNagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user...CVE-2020-24899Fix availableEPSS 17.3%8.8 High
- nagios xiNagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated user...CVE-2020-22427DisputedEPSS 14.9%7.2 High
- nagios xiNagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in...CVE-2021-25299EPSS 97.8%6.1 Medium
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...CVE-2021-25298In KEVPublic exploitEPSS 73.6%8.8 High
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...CVE-2021-25297In KEVPublic exploitEPSS 56.7%8.8 High
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...CVE-2021-25296In KEVPublic exploitEPSS 71.9%8.8 High
- nagios xiImproper access and command validation in the Docker config wizard of Nagios XI before 5.8.0...CVE-2021-31939.8 Critical
- nagios xiAn issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line...CVE-2020-35578Public exploitEPSS 81.9%7.2 High
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).CVE-2020-27991EPSS 34.4%5.4 Medium
- Show moreLoading…