Nagios XI

• CVE-2021-47694 Medium 5.1 Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command 0.5%
• CVE-2020-36857 High 8.6 Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page 2.3%
• CVE-2020-36856 Critical 9.4 Nagios XI < 5.6.14 Authenticated RCE command_test.php via address 2.5%
• CVE-2024-14002 High 7.1 Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis 1.7%
• CVE-2025-34284 Critical 9.4 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin 4.0%
• CVE-2024-13995 High 7.1 Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure 1.3%
• CVE-2025-34283 High 7.1 Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes 1.0%
• CVE-2024-13994 High 8.7 Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization 0.9%
• CVE-2024-13999 High 7.3 Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure 1.9%