Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Capacity Planning Report component.Check if you run itEPSS 0.59%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool.Check if you run itEPSS 0.49%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the BPI (Business Process Intelligence) component’s Config Management and Edit Config page.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via BPI config ID handling.Check if you run itEPSS 0.45%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component.Check if you run itEPSS 0.49%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" JavaScript link.Check if you run itEPSS 0.44%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the Alert Heatmap report and the “My Reports” listing of the web interface.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.7 are vulnerable to cross-site scripting (XSS) via the Audit Log page’s Send to NLS form.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) via the Hypermap Replay component.Check if you run itEPSS 0.32%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal.Check if you run itEPSS 1.66%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location.Check if you run itEPSS 1.38%Oct 30, 2025
- Medium6.9Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool.Check if you run itEPSS 0.63%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) via the Apply Configuration error text.Check if you run itEPSS 0.44%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the BPI component via the info URL field.Check if you run itEPSS 0.44%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the update checking feature.Check if you run itEPSS 0.44%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page.Check if you run itEPSS 1.97%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality.Check if you run itEPSS 1.11%Oct 30, 2025
- Critical9.2Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed.Check if you run itEPSS 1.06%Oct 30, 2025
- Medium5.1Nagios XI versions prior to < 2024R1.1.2 are vulnerable to a reflected cross-site scripting (XSS) via the login page when accessed with older web browsers.Check if you run itEPSS 0.80%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting (XSS) vulnerability in the dashboard dashlet AJAX load functionality.Check if you run itEPSS 0.56%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins.Check if you run itEPSS 2.30%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence (BPI) component.Check if you run itEPSS 2.40%Oct 30, 2025
- High7.3Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries.Check if you run itEPSS 0.23%Oct 30, 2025
Sort