Lucene search
+L

13 matches found

OSV
OSV
•added 2025/11/03 10:16 p.m.•14 views

CVE-2024-13997

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

7.2CVSS5.8AI score0.0121EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/03 10:16 p.m.•17 views

CVE-2024-13997

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

9.4CVSS0.0121EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/03 9:55 p.m.•34 views

CVE-2024-13997 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

9.4CVSS0.0121EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/11/03 9:55 p.m.•12 views

CVE-2024-13997 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

9.4CVSS8.1AI score0.0121EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/03 9:55 p.m.•42 views

CVE-2024-13997

Nagios XI prior to 2024R1.1.3 is affected by a privilege-escalation vulnerability in the Migrate Server feature. An authenticated administrator can abuse the migration workflow to obtain root privileges on the underlying XI host, effectively taking full control of the operating system. Root cause...

9.4CVSS8.1AI score0.0121EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2025/11/03 12:00 a.m.•21 views

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.1.3, which stems from a mismanagement of...

9.4CVSS6.6AI score0.0121EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•6 views

CVE-2024-13997: Improper Privilege Management

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

9.4CVSS8.2AI score0.0121EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/05/28 12:00 a.m.•21 views

PT-2025-44800

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.1.3 Description Nagios XI versions prior to 2024R1.1.3 have a flaw that allows an authenticated administrator to gain root privileges on the host system. This is achieved by exploiting the Migrate Server...

9.4CVSS7AI score0.0121EPSS
SaveExploits0References11
OSV
OSV
•added 2023/04/14 3:15 p.m.•22 views

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

5.5CVSS6.1AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/14 2:04 p.m.•251 views

CVE-2023-28091

CVE-2023-28091 concerns HPE OneView, specifically the virtual appliance. The vulnerability is tied to the option “Migrate server hardware,” which may cause exposure of sensitive information in an HPE OneView support dump. Publicly documented details indicate a likely impact to confidentiality wit...

5.5CVSS5.3AI score0.00192EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/04/14 12:00 a.m.•22 views

PT-2023-21551 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the exposure of sensitive information in an HPE OneView support dump when using the "Migrate server hardware" option in the HPE OneView virtual appliance...

5.5CVSS5.3AI score0.00192EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/14 12:00 a.m.•7 views

CVE-2023-28091: Undefined Security Weakness

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

5.5CVSS5.7AI score0.00192EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2023/04/12 12:00 a.m.•18 views

HPESBGN04467 rev.1 - HPE OneView "Migrate Server Hardware" Option, Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView 7.0 to 8.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-28091 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.9 |...

7.8CVSS6.1AI score0.00192EPSS
SaveExploits0
Rows per page
Query Builder