Skip to contentNagios vulnerabilities
Newest
- nagios xiNagios XI < 5.7.2 Unrestricted File Upload via Audio Import DirectoryCVE-2020-368638.7 High
- nagios xiNagios XI < 5.6.11 Unauthenticated XSS and SSRF via HighchartsCVE-2020-368626.9 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error TextCVE-2022-505875.1 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS via BPI Info URLCVE-2022-505865.1 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS in Update CheckingCVE-2022-505885.1 Medium
- nagios xiNagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit PageCVE-2020-368698.7 High
- nagios xiNagios XI < 5.2.4 SQL Injection in Notification SearchCVE-2016-150508.7 High
- nagios xiNagios XI < 2024R1.1.3 Session Not Invalidated After Password ChangeCVE-2024-139969.2 Critical
- nagios xiNagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older BrowsersCVE-2024-139935.1 Medium
- nagios xiNagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load FunctionalityCVE-2013-100715.1 Medium
- nagios xiNagios XI < 2024R1.3.2 RCE via WinRM Configuration WizardCVE-2024-140089.4 Critical
- nagios xiNagios XI < 2026R1 RCE via Run Check Command in CCMCVE-2025-342869.4 Critical
- nagios xiNagios XI < 2024R1.2 RCE via NRDP Server PluginsCVE-2024-140039.4 Critical
- nagios xiNagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)CVE-2025-341349.4 Critical
- nagios xiNagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPECVE-2011-100357.3 High
- nagios xiNagios XI < 2024R1.0.1 Privilege Escalation via System ProfileCVE-2024-140099.4 Critical
- nagios xiNagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)CVE-2024-140048.7 High
- nagios xiNagios XI < 5.5.7 Privilege Escalation via MRTG Graphing ComponentCVE-2018-251238.5 High
- nagios xiNagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh ScriptCVE-2020-368688.5 High
- nagios xiNagios XI < 2024R2 Privilege Escalation via process_perfdata.plCVE-2025-342878.4 High
- nagios xiNagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit FilesCVE-2025-341355.1 Medium
- nagios xiNagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary DirectoryCVE-2021-477008.5 High
- nagios xiNagios XI < 2024R1.2.2 Host Header InjectionCVE-2024-140068.8 High
- nagios xiNagios XI < 5.4.13 Component Download Page RCECVE-2018-251228.7 High
- nagios xiNagios XI < 2024R1.2 Command Injection via Docker WizardCVE-2024-140059.4 Critical
- nagios xiNagios XI < 5.7.3 Command Injection in Report PDF DownloadCVE-2020-368678.7 High
- nagios xiNagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates PagesCVE-2021-476895.1 Medium
- nagios xiNagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services PageCVE-2021-476915.1 Medium
- nagios xiNagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion FlowsCVE-2022-505845.1 Medium
- nagios xiNagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period PagesCVE-2020-368615.1 Medium
- nagios xiNagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay ModalsCVE-2021-476905.1 Medium
- nagios xiNagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit PagesCVE-2020-368605.1 Medium
- nagios xiNagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search InputCVE-2022-505855.1 Medium
- nagios xiNagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit PagesCVE-2020-368598.7 High
- nagios xiNagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search TextCVE-2021-476938.7 High
- nagios xiNagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test CommandCVE-2021-476945.1 Medium
- nagios xiNagios XI < 2012R1.6 Auto-Discovery Shell Command InjectionCVE-2013-100738.7 High
- nagios xiNagios XI < 2012R1.6 Auto-Discovery Missing AuthorizationCVE-2013-100727.2 High
- nagios xiNagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface PageCVE-2020-368578.6 High
- nagios xiNagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCMCVE-2012-100638.7 High
- nagios xiNagios XI < 5.6.14 Authenticated RCE command_test.php via addressCVE-2020-368569.4 Critical
- nagios xiNagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVisCVE-2024-140027.1 High
- nagios xiNagios XI < 2024R2 Authenticated Command Injection via WinRM PluginCVE-2025-342849.4 Critical
- nagios xiNagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information DisclosureCVE-2024-139957.1 High
- nagios xiNagios XI < 2024R1.4.2 API Key Disclosure via Neptune ThemesCVE-2025-342837.1 High
- nagios xiNagios XI < 2024R1.1.2 Allow Insecure Logins Missing AuthorizationCVE-2024-139948.7 High
- nagios xiNagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information DisclosureCVE-2024-139997.3 High
- nagios network analyzerNagios Network Analyzer < 2024R1 XSS via Percentile Calculator MenuCVE-2023-73195.1 Medium
- nagios network analyzerNagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSSCVE-2025-342785.1 Medium
- nagios network analyzerNagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal FunctionCVE-2025-342808.6 High
- Show moreLoading…