CVE-2019-9167

Nagios XI vulnerability CVE-2019-9167 is an XSS flaw affecting Nagios XI versions before 5.5.11, exploitable via the xiwindow parameter and capable of injecting arbitrary script/HTML. Other connected sources corroborate a pre-5.5.11 window, with reports of XSS potentially enabling further code ex...

CVE-2019-9167

Cross-site scripting XSS vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter...

CVE-2019-9166

Nagios XI before 5.5.11 is affected by CVE-2019-9166, a local privilege-escalation vulnerability. The underlying issue allows an attacker with local access to write to config.inc.php and import_xiconfig.php to elevate to root. Public write-up and advisories (CNVD/PRION/CVELIST, PT-Security, Packe...

CVE-2019-9166

Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...

CVE-2019-9165

SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id...

CVE-2019-9165

CVE-2019-9165 is a SQL injection flaw in Nagios XI before 5.5.11 exploitable via the API using fusekeys and a malicious user id. Components affected: Nagios XI web API; root cause: improper handling of API parameters allowing arbitrary SQL execution. Public data cites a NVD CVSS v3.1 base score o...

CVE-2019-9202

Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...

CVE-2019-9202

Nagios IM (component of Nagios XI) prior to 2.2.7 is vulnerable to an authenticated arbitrary code execution via API key issues. This CVE (CVE-2019-9202) is confirmed in Red Hat and other advisories, affecting Nagios IM versions

CVE-2019-9203

CVE-2019-9203 affects Nagios IM (component of Nagios XI) prior to 2.2.7. The issue is an authorization bypass that permits closing incidents in IM via the API, enabling unauthorized operations. Documents consistently describe this vulnerability as an authorization bypass in Nagios IM before 2.2.7...

CVE-2019-9203

Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...

CVE-2019-9204

SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...

CVE-2019-9204

Nagios IM (Nagios XI component) is affected by a SQL injection vulnerability prior to 2.2.7. The issue allows an attacker to execute arbitrary SQL commands through the affected component, as described in CVE-2019-9204 records from Nagios/Red Hat/Check Point tooling. Red Hat and other advisories r...

CVE-2019-9164

Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job...

CVE-2019-9164

Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job...

Command injection

Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job...

CVE-2019-9164

Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job...

CVE-2019-9164

Nagios XI prior to 5.5.11 has a command-injection vulnerability allowing an authenticated user to execute arbitrary remote commands via a new autodiscovery job. The issue affects Nagios XI (authenticated, autodiscovery-privileged context) and can lead to remote code execution. Remediation per sou...

PT-2019-19433 · Nagios · Nagios Im

Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: The issue allows authenticated users to execute arbitrary code due to API key problems. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...

PT-2019-19434 · Nagios · Nagios Xi +1

Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: The issue allows for authorization bypass in Nagios IM, a component of Nagios XI, enabling the closure of incidents via the API. Recommendations: For versions prior to 2.2.7, update to version...

PT-2019-19408 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.5.11 Description: A cross-site scripting XSS issue allows attackers to inject arbitrary web script or HTML via the xiwindow parameter. This could potentially lead to unauthorized actions on the affected system...