Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.2 views

CVE-2021-47696

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting XSS via BPI config ID handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.2AI score0.00478EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.2 views

CVE-2025-34134

Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence BPI component. Insufficient validation and sanitization of administrator-controlled BPI configuration parameters notably bpilogfile and bpiconfigfile allow an authenticated...

9.4CVSS8.3AI score0.01351EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.1 views

EUVD-2021-34703

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting XSS via BPI config ID handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.7AI score0.00478EPSS
Exploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.1 views

CVE-2021-47696

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting XSS via BPI config ID handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.9AI score
Exploits0References2
Cvelist
Cvelist
added 2025/10/30 9:49 p.m.4 views

CVE-2021-47696 Nagios XI < 5.8.0 XSS via BPI Config ID Handling

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting XSS via BPI config ID handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00478EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 9:49 p.m.1 views

CVE-2021-47696 Nagios XI < 5.8.0 XSS via BPI Config ID Handling

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting XSS via BPI config ID handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.8AI score0.00478EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.1 views

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 5.8.0, which stems from improper handling o...

5.4CVSS5.9AI score0.00478EPSS
Exploits0References2
Rows per page
Query Builder