Nagios Log Server

• CVE-2025-34323 High 8.5 Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules 0.3%
• CVE-2025-34322 High 8.6 Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries 9.2%
• CVE-2023-7321 Medium 5.1 Nagios Log Server < 2.1.14 XSS via Snapshots Page 0.5%
• CVE-2023-7323 Medium 5.1 Nagios Log Server < 2024R1 XSS via Create User Function 0.5%
• CVE-2020-36858 Medium 5.1 Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages 0.5%
• CVE-2025-34298 High 8.7 Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation 0.7%
• CVE-2025-34277 Critical 9.4 Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID 2.2%
• CVE-2025-34272 Medium 5.3 Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback 0.9%
• CVE-2025-34273 High 7.1 Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion 1.0%
• CVE-2024-58273 High 8.5 Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root 0.3%
• CVE-2025-34274 Critical 9.3 Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges 2.1%
• CVE-2023-7322 High 8.7 Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access 1.1%
• CVE-2025-34271 High 8.7 Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext 0.7%
• CVE-2025-34270 Medium 6.9 Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated 0.6%
• CVE-2025-44824 High 8.5 Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch ca 2.8%
• CVE-2025-44823 Critical 9.9 Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475. 16.9%