CVE-2024-13723

The CVE-2024-13723 issue affects the NagVis component bundled with Checkmk. Affected: NagVis/Checkmk prior to remediation versions. Root cause: an authenticated admin can upload a crafted map configuration (e.g., exploit.cfg) via the Map module’s import path, bypassing validation, then manipulate...

CVE-2024-13723

The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP...

PT-2025-2258 · Checkmk +1 · Checkmk Nagvis +1

Name of the Vulnerable Software and Affected Versions: Checkmk NagVis component affected versions not specified Description: The NagVis component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the...

PT-2025-2259 · Nagvis +2 · Nagvis +2

Name of the Vulnerable Software and Affected Versions: Checkmk affected versions not specified Description: The issue concerns the "NagVis" component within Checkmk, which is susceptible to remote code execution. An authenticated attacker with administrative level privileges can upload a maliciou...

Checkmk NagVis Reflected Cross-site Scripting

Vulnerability Details Affected Vendor: Checkmk Affected Product: Checkmk/NagVis Affected Version: Checkmk 2.3.0p2, NagVis 1.9.40 Platform: GNU/Linux CWE Classification: CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVE ID: CVE-2024-13722 2...

Checkmk NagVis Remote Code Execution

Vulnerability Details Affected Vendor: Checkmk Affected Product: Checkmk/NagVis Affected Version: Checkmk 2.3.0p2, NagVis 1.9.40 Platform: GNU/Linux CWE Classification: CWE-434: Unrestricted Upload of File with Dangerous Type CVE ID: CVE-2024-13723 2. Vulnerability Description The "NagVis"...

NagVis 安全漏洞

NagVis is a program from NagVis open source. It is used to visualize your chosen monitoring core data in a user-friendly way. NagVis has a security vulnerability that stems from vulnerability to remote code execution attacks...

NagVis 安全漏洞

NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. NagVis has a security vulnerability that stems from vulnerability to cross-site scripting attacks...

Cross-Site Scripting (XSS)

NagVis is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient sanitization of input fields before rendering, and attackers can exploit this to inject and execute arbitrary JavaScript code in the context of the victim’s browser...

CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

DEBIAN-CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

UBUNTU-CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-47093 Fix various XSS issues and potential RCE

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-47093 Fix various XSS issues and potential RCE

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-47093 Fix various XSS issues and potential RCE

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-47093

CVE-2024-47093 affects NagVis prior to 1.9.42, with an improper input neutralization that can lead to XSS. The vulnerability is detailed in multiple security advisories referencing NagVis components and the Debian LTS advisory, which notes fixes in Debian 11 for NagVis 1.9.25-2+deb11u1. The repor...

CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

NagVis 安全漏洞

NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. A security vulnerability existed prior to Nagvis version 1.9.42, which stemmed from improper neutralization of input and could lead to a cross-site scripting vulnerability...

PT-2024-32405 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.42 Description: The issue is related to improper neutralization of input, which can lead to Cross-Site Scripting XSS. This means that an attacker could potentially inject malicious scripts into the application,...

Cross-site Scripting (XSS)

nagvis is vulnerable to Cross-site Scripting XSS. An attacker could exploit this vulnerability by tricking a user into clicking on a malicious link or visiting a malicious website. The malicious link or website would contain a specially crafted XSS payload, which would be injected into the NagVis...