Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.1 views

CVE-2024-14000

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting XSS via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.2AI score0.00736EPSS
Exploits0References1
NVD
NVD
added 2025/10/30 10:15 p.m.2 views

CVE-2024-14000

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting XSS via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00736EPSS
Exploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.0 views

CVE-2024-14000

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting XSS via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/30 9:51 p.m.1 views

CVE-2024-14000 Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting XSS via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.8AI score0.00736EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/30 9:51 p.m.3 views

CVE-2024-14000 Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting XSS via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00736EPSS
Exploits0References3
CVE
CVE
added 2025/10/30 9:51 p.m.7 views

CVE-2024-14000

CVE-2024-14000 concerns Nagios XI versions prior to 2024R1.1.3 and is described across multiple sources as an XSS vulnerability in the Capacity Planning Report component. The root cause is insufficient validation or escaping of user-supplied input, enabling an attacker to inject and execute arbit...

5.4CVSS5.8AI score0.00736EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.2 views

PT-2025-44557

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.1.3 Description Nagios XI is susceptible to cross-site scripting XSS through the Capacity Planning Report component. A lack of proper input validation or escaping could enable an attacker to inject and execut...

5.4CVSS5.9AI score0.00736EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.1 views

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.1.3 that stems from insufficient...

5.4CVSS5.9AI score0.00736EPSS
Exploits0References3
Rows per page
Query Builder