PT-2025-44462

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.6.14 Description Nagios XI versions prior to 5.6.14 have an authenticated remote command execution issue in the command test.php script within the Core Config Manager CCM. A lack of proper validation of the addres...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.1.2 that stems from the potential...

PT-2025-44484

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.8.9 Description The software is susceptible to a cross-site scripting XSS issue through the Apply Configuration error text. A lack of proper input validation or escaping of user-provided data could enable an...

PT-2025-44511

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.4.2 Description Nagios XI versions prior to 2024R1.4.2 configure certain systemd unit files with overly permissive permissions. Specifically, the nagios.service unit possesses unnecessary executable...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 5.11.3, which stems from insufficient...

PT-2025-44544

Nagios XI versions prior to 5.4.13 are vulnerable to cross-site scripting XSS via the Views page of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

PT-2025-44520

Name of the Vulnerable Software and Affected Versions Nagios Network Analyzer versions prior to 2024R2.0.1 Description Nagios Network Analyzer contains a flaw in how it handles LDAP certificate management. Specifically, the certificate removal process does not properly sanitize input. An...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 5.6.14, which stems from insufficient validatio...

PT-2025-44528

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2011R1.9 Description Nagios XI versions prior to 2011R1.9 are susceptible to cross-site scripting XSS due to inadequate validation or escaping of user-supplied input when handling xiwindow variables. This can allow ...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI versions prior to 5.8.7 that stems from improperly set...

PT-2025-44509

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R1.0.2 Description The software contains a local privilege escalation issue. An attacker with the ability to execute commands as the Apache web user or the backend shell user can gain root access on the...

PT-2025-44464

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2.1.6 Description Nagios Log Server versions prior to 2.1.6 contain cross-site scripting XSS issues through the web interface on the Create User, Edit User, and Manage Host Lists pages. Insufficient validati...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI versions prior to 5.5.7, which stems from an overprivileged MRTG...

PT-2025-44492

Name of the Vulnerable Software and Affected Versions Nagios Network Analyzer versions prior to 2024R1 Description Nagios Network Analyzer is susceptible to a cross-site scripting XSS issue through the Percentile Calculator menu. This occurs due to inadequate validation or escaping of user-provid...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI CCM versions prior to 3.1.7 and Nagios XI version 5.8.9, which...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R2, which stems from misconfigured...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2011R1.9, which stems from insufficient...

PT-2025-44475

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.8.2 Core Config Manager CCM versions prior to 3.1.1 Description The Core Config Manager CCM in Nagios XI is susceptible to cross-site scripting XSS issues through the Services page. The config name and service...

PT-2025-44527

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2011R1.9 Description The software is susceptible to cross-site scripting XSS due to inadequate validation or escaping of user-supplied input when handling the backend url JavaScript link. This could allow an attacke...

Nagios Log Server 安全漏洞

Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios, USA. A security vulnerability exists in Nagios Log Server versions prior to 1.4.2, which stems from the Logs table in the Dashboards section not securely encoding the contents of the logs,...