Skip to contentNagios Xi vulnerabilities
- nagios xiNagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPECVE-2011-100357.3 High
- nagios xiNagios XI < 2024R1.0.1 Privilege Escalation via System ProfileCVE-2024-140099.4 Critical
- nagios xiNagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)CVE-2024-140048.7 High
- nagios xiNagios XI < 5.5.7 Privilege Escalation via MRTG Graphing ComponentCVE-2018-251238.5 High
- nagios xiNagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh ScriptCVE-2020-368688.5 High
- nagios xiNagios XI < 2024R2 Privilege Escalation via process_perfdata.plCVE-2025-342878.4 High
- nagios xiNagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit FilesCVE-2025-341355.1 Medium
- nagios xiNagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary DirectoryCVE-2021-477008.5 High
- nagios xiNagios XI < 2024R1.2.2 Host Header InjectionCVE-2024-140068.8 High
- nagios xiNagios XI < 5.4.13 Component Download Page RCECVE-2018-251228.7 High
- nagios xiNagios XI < 2024R1.2 Command Injection via Docker WizardCVE-2024-140059.4 Critical
- nagios xiNagios XI < 5.7.3 Command Injection in Report PDF DownloadCVE-2020-368678.7 High
- nagios xiNagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates PagesCVE-2021-476895.1 Medium
- nagios xiNagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services PageCVE-2021-476915.1 Medium
- nagios xiNagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion FlowsCVE-2022-505845.1 Medium
- nagios xiNagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period PagesCVE-2020-368615.1 Medium
- nagios xiNagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay ModalsCVE-2021-476905.1 Medium
- nagios xiNagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit PagesCVE-2020-368605.1 Medium
- nagios xiNagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search InputCVE-2022-505855.1 Medium
- nagios xiNagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit PagesCVE-2020-368598.7 High
- nagios xiNagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search TextCVE-2021-476938.7 High
- nagios xiNagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test CommandCVE-2021-476945.1 Medium
- nagios xiNagios XI < 2012R1.6 Auto-Discovery Shell Command InjectionCVE-2013-100738.7 High
- nagios xiNagios XI < 2012R1.6 Auto-Discovery Missing AuthorizationCVE-2013-100727.2 High
- nagios xiNagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface PageCVE-2020-368578.6 High
- nagios xiNagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCMCVE-2012-100638.7 High
- nagios xiNagios XI < 5.6.14 Authenticated RCE command_test.php via addressCVE-2020-368569.4 Critical
- nagios xiNagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVisCVE-2024-140027.1 High
- nagios xiNagios XI < 2024R2 Authenticated Command Injection via WinRM PluginCVE-2025-342849.4 Critical
- nagios xiNagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information DisclosureCVE-2024-139957.1 High
- nagios xiNagios XI < 2024R1.4.2 API Key Disclosure via Neptune ThemesCVE-2025-342837.1 High
- nagios xiNagios XI < 2024R1.1.2 Allow Insecure Logins Missing AuthorizationCVE-2024-139948.7 High
- nagios xiNagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information DisclosureCVE-2024-139997.3 High
- nagios xiNagios XI < 2026R1 Configuration Wizard Authenticated Command InjectionCVE-2025-34227Public exploitEPSS 26.5%8.6 High
- nagios xiNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCECVE-2024-139868.7 High
- nagios xiA cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows...CVE-2025-564326.1 Medium
- nagios xiNagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by...CVE-2024-549576.1 Medium
- nagios xiNagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated...CVE-2024-549616.5 Medium
- nagios xiA SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL...CVE-2024-549606.5 Medium
- nagios xiNagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the...CVE-2024-549596.1 Medium
- nagios xiNagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the...CVE-2024-549586.1 Medium
- nagios xiA cross-site scripting (XSS) vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute...CVE-2024-428985.4 Medium
- nagios xiNagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly...CVE-2023-480829.1 Critical
- nagios xiAn issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to...CVE-2024-33775Public exploit8.8 High
- nagios xiAn issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted...CVE-2024-24402Public exploit9.8 Critical
- nagios xiSQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary...CVE-2024-24401Public exploitEPSS 45.9%9.8 Critical
- nagios xiA stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to...CVE-2023-510725.4 Medium
- nagios xiNagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE)...CVE-2023-48085EPSS 75.8%9.8 Critical
- nagios xiNagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the...CVE-2023-48084Public exploitEPSS 34.0%9.8 Critical
- nagios xiA SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with...CVE-2023-409347.2 High
- Show moreLoading…