Nagios XI

• CVE-2021-47698 Medium 5.1 Nagios XI < 5.8.7 XSS in Core UI Views URL handling 0.4%
• CVE-2024-13997 Critical 9.4 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host 1.2%
• CVE-2024-13998 Medium 6.0 Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure 1.0%
• CVE-2024-13992 Medium 5.1 Nagios XI < 2024R1.1 XSS via Missing Page / 404 0.6%
• CVE-2021-47697 Medium 5.1 Nagios XI < 5.8.0 XSS via Views URL Handling 0.4%
• CVE-2021-47695 Medium 5.1 Nagios XI < 5.8.0 XSS via My Tools Page 0.4%
• CVE-2020-36866 Medium 5.1 Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface 0.4%
• CVE-2023-7316 Medium 5.1 Nagios XI < 2024R1 XSS via Graph Explorer 0.6%
• CVE-2023-7315 Medium 5.1 Nagios XI < 5.11.3 XSS via Graph Explorer 0.5%
• CVE-2024-14001 Medium 5.1 Nagios XI < 2024R1.1.3 XSS via Executive Summary Report 0.6%
• CVE-2020-36864 Medium 5.1 Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting 0.4%
• CVE-2023-7318 Medium 5.1 Nagios XI < 2024R1.0.2 XSS via Core Command Expansion 0.6%
• CVE-2024-14000 Medium 5.1 Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report 0.6%
• CVE-2023-7313 Medium 5.1 Nagios XI < 5.11.3 XSS via Bulk Modifications 0.5%
• CVE-2020-36865 Medium 5.1 Nagios XI < 5.7.2 XSS via BPI Config Management 0.4%
• CVE-2021-47696 Medium 5.1 Nagios XI < 5.8.0 XSS via BPI Config ID Handling 0.4%
• CVE-2023-7314 Medium 5.1 Nagios XI < 5.11.3 XSS via Bandwidth Report 0.5%
• CVE-2021-47699 Medium 5.1 Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form 0.4%
• CVE-2023-53688 Medium 5.1 Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay 0.3%
• CVE-2023-7317 Critical 9.4 Nagios XI < 2024R1 Web SSH Terminal Missing Access Control 1.7%
• CVE-2020-36863 High 8.7 Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory 1.4%
• CVE-2020-36862 Medium 6.9 Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts 0.6%
• CVE-2022-50587 Medium 5.1 Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text 0.4%
• CVE-2022-50586 Medium 5.1 Nagios XI < 5.8.9 Stored XSS via BPI Info URL 0.4%
• CVE-2022-50588 Medium 5.1 Nagios XI < 5.8.9 Stored XSS in Update Checking 0.4%
• CVE-2020-36869 High 8.7 Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page 2.0%
• CVE-2024-13996 Critical 9.2 Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change 1.1%
• CVE-2024-13993 Medium 5.1 Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers 0.8%
• CVE-2024-14008 Critical 9.4 Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard 2.4%
• CVE-2025-34286 Critical 9.4 Nagios XI < 2026R1 RCE via Run Check Command in CCM 2.4%
• CVE-2024-14003 Critical 9.4 Nagios XI < 2024R1.2 RCE via NRDP Server Plugins 2.3%
• CVE-2025-34134 Critical 9.4 Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI) 2.4%
• CVE-2024-14009 Critical 9.4 Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile 1.2%
• CVE-2024-14004 High 8.7 Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf) 1.1%
• CVE-2020-36868 High 8.5 Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script 0.3%
• CVE-2025-34287 High 8.4 Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl 0.3%
• CVE-2025-34135 Medium 5.1 Nagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files 0.4%
• CVE-2021-47700 High 8.5 Nagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory 0.4%
• CVE-2024-14006 High 8.8 Nagios XI < 2024R1.2.2 Host Header Injection 0.5%
• CVE-2024-14005 Critical 9.4 Nagios XI < 2024R1.2 Command Injection via Docker Wizard 4.0%
• CVE-2020-36867 High 8.7 Nagios XI < 5.7.3 Command Injection in Report PDF Download 2.5%
• CVE-2021-47689 Medium 5.1 Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages 0.4%
• CVE-2021-47691 Medium 5.1 Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page 0.4%
• CVE-2022-50584 Medium 5.1 Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows 0.4%
• CVE-2020-36861 Medium 5.1 Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages 0.4%
• CVE-2021-47690 Medium 5.1 Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals 0.4%
• CVE-2020-36860 Medium 5.1 Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages 0.4%
• CVE-2022-50585 Medium 5.1 Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input 0.4%
• CVE-2020-36859 High 8.7 Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages 0.9%
• CVE-2021-47693 High 8.7 Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text 1.1%