Skip to content

Nagios Xi vulnerabilities

nagios xiAn issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line...CVE-2020-35578Public exploitEPSS 81.9%7.2 HighJanuary 13, 2021
nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).CVE-2020-27991EPSS 34.4%5.4 MediumNovember 16, 2020
nagios xiNagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).CVE-2020-27990EPSS 34.4%5.4 MediumNovember 16, 2020
nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).CVE-2020-27989EPSS 34.4%5.4 MediumNovember 16, 2020
nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).CVE-2020-27988EPSS 90.4%5.4 MediumNovember 16, 2020
nagios xiImproper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an...CVE-2020-286488.8 HighNovember 16, 2020
nagios xiImproper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged,...CVE-2020-57967.8 HighNovember 13, 2020
nagios xiImproper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a...CVE-2020-5791Public exploitEPSS 78.6%7.2 HighOctober 20, 2020
nagios xiCross-site request forgery in Nagios XI 5.7.3 allows a remote attacker to perform sensitive...CVE-2020-57906.5 MediumOctober 20, 2020
nagios xiImproper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote,...CVE-2020-5792Public exploitEPSS 63.5%7.2 HighOctober 20, 2020
nagios xiAn issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in...CVE-2020-159039.8 CriticalSeptember 9, 2020
nagios xiajaxhelper.php in Nagios XI before 5.7.2 allows remote attackers to execute arbitrary commands...CVE-2020-15901EPSS 21.9%8.8 HighJuly 22, 2020
nagios xiGraph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.CVE-2020-15902EPSS 35.1%6.1 MediumJuly 22, 2020
nagios xiNagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.CVE-2020-10819EPSS 71.3%4.8 MediumMarch 22, 2020
nagios xiNagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.CVE-2020-10820EPSS 19.1%4.8 MediumMarch 22, 2020
nagios xiNagios XI 5.6.11 allows XSS via the account/main.php theme parameter.CVE-2020-10821EPSS 71.3%4.8 MediumMarch 22, 2020
nagios xiIn Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell...CVE-2019-20197Public exploitEPSS 22.6%8.8 HighDecember 31, 2019
nagios xiIn Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup...CVE-2019-20139EPSS 26.1%5.4 MediumDecember 30, 2019
nagios xiNagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to...CVE-2019-15949In KEVPublic exploitEPSS 77.0%8.8 HighSeptember 5, 2019
nagios xiNagios XI before 5.5.4 has XSS in the auto login admin management page.CVE-2018-171474.8 MediumJuly 10, 2019
nagios xiA cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter...CVE-2018-171465.4 MediumJune 19, 2019
nagios xiAn Insufficient Access Control vulnerability (leading to credential disclosure) in...CVE-2018-171489.8 CriticalJune 19, 2019
nagios xiNagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the...CVE-2019-12279Public exploitDisputed9.8 CriticalMay 22, 2019
nagios xiCross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject...CVE-2019-9167EPSS 21.7%6.1 MediumMarch 28, 2019
nagios xiPrivilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to...CVE-2019-91667.8 HighMarch 28, 2019
nagios xiSQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL...CVE-2019-91659.8 CriticalMarch 28, 2019
nagios xiCommand injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary...CVE-2019-9164EPSS 46.0%8.8 HighMarch 28, 2019
nagios xiAn issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss...CVE-2018-201726.1 MediumDecember 17, 2018
nagios xiAn issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss...CVE-2018-201716.1 MediumDecember 17, 2018
nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...CVE-2018-157146.1 MediumNovember 14, 2018
nagios xiNagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via...CVE-2018-157135.4 MediumNovember 14, 2018
nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...CVE-2018-15712EPSS 48.6%6.1 MediumNovember 14, 2018
nagios xiNagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more...CVE-2018-15711EPSS 36.0%8.8 HighNovember 14, 2018
nagios xiNagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via...CVE-2018-15710Public exploitEPSS 38.2%7.8 HighNovember 14, 2018
nagios xiNagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted...CVE-2018-15709EPSS 21.0%8.8 HighNovember 14, 2018
nagios xiSnoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary...CVE-2018-15708Public exploitEPSS 89.5%9.8 CriticalNovember 14, 2018
nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php...CVE-2018-10738EPSS 41.4%7.2 HighMay 16, 2018
nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php...CVE-2018-10737EPSS 41.4%7.2 HighMay 16, 2018
nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1...CVE-2018-10736EPSS 41.7%7.2 HighMay 16, 2018
nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php...CVE-2018-10735EPSS 41.7%7.2 HighMay 16, 2018
nagios xiAn issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in (1) the...CVE-2018-105545.4 MediumApril 30, 2018
nagios xiAn issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal...CVE-2018-10553EPSS 38.4%6.5 MediumApril 30, 2018
nagios xiA privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an...CVE-2018-8736Public exploitEPSS 45.6%8.8 HighApril 18, 2018
nagios xiRemote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13...CVE-2018-8735Public exploitEPSS 63.6%8.8 HighApril 18, 2018
nagios xiSQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5...CVE-2018-8734Public exploitEPSS 53.8%9.8 CriticalApril 18, 2018
nagios xiAuthentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x...CVE-2018-8733Public exploitEPSS 26.6%9.8 CriticalApril 18, 2018
nagios xiSQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios...CVE-2013-6875Public exploit7.5 HighNovember 26, 2013