CLSA-2026-1782954029 TuxCare security update for highcharts (1 CVE)

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 8.2.2-tuxcare.1...

CLSA-2026-1782867619 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.2.0-tuxcare.1...

CLSA-2026-1782867618 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...

CLSA-2026-1782867611 TuxCare security update for highcharts (3 CVEs)

TuxCare rebuilt highcharts to address 3 CVEs. Fixed in 6.0.7-tuxcare.1...

CLSA-2026-1782867614 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.3-tuxcare.1...

CLSA-2026-1782867617 TuxCare security update for highcharts (1 CVE)

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 7.2.2-tuxcare.1...

CLSA-2026-1782867610 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.0-tuxcare.1...

The vulnerability of the library used to create Highcharts charts in Nagios XI monitoring tools allows attackers to perform cross-site scripting attacks.

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...

The vulnerability of the library used to create Highcharts charts in Nagios XI monitoring tools allows a malicious user to gain access to read, modify, or delete data.

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to deficiencies in access control when using a temporal catalog for export. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

CVE-2020-36862

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...

CVE-2021-47700

Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user. Local or co-hosted processes could read/overwrite export artifacts or manipulate paths, risking disclosure or tampering and potential code...

EUVD-2021-34705

Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user. Local or co-hosted processes could read/overwrite export artifacts or manipulate paths, risking disclosure or tampering and potential code...

EUVD-2020-30808

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...

CVE-2021-47700

Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user. Local or co-hosted processes could read/overwrite export artifacts or manipulate paths, risking disclosure or tampering and potential code...

CVE-2021-47700

Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user. Local or co-hosted processes could read/overwrite export artifacts or manipulate paths, risking disclosure or tampering and potential code...

CVE-2020-36862

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...

CVE-2020-36862

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...

CVE-2020-36862 Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...

CVE-2020-36862

CVE-2020-36862 affects Nagios XI versions prior to 5.6.11, in the Highcharts local exporting tool. The Red Hat entry confirms unauthenticated vulnerabilities caused by the export feature, allowing (1) script execution in exported content due to insufficient output encoding (XSS) and (2) server-si...

CVE-2020-36862 Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...