The vulnerability of the command_test.php script of the Core Config Manager component of the Nagios XI monitoring tool allows a hacker to execute arbitrary commands.

The vulnerability of the commandtest.php script of the Core Config Manager component of the Nagios XI monitoring tool is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the address parameter. Exploiting this...

The vulnerability of the library used to create Highcharts charts in Nagios XI monitoring tools allows attackers to perform cross-site scripting attacks.

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...

The vulnerability of the Nagios XI monitoring tool, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Core Configuration Manager (CCM) interface of the Nagios XI IT infrastructure monitoring tool allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core Configuration Manager CCM interface of the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Capacity Planning Report component of the Nagios XI monitoring tool allows a attacker to execute arbitrary code.

The vulnerability of the Capacity Planning Report component in the Nagios XI monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability in the Nagios XI monitoring tool’s script/ncludes/comComponents/ccm/index.php allows a attacker to execute arbitrary code.

The vulnerability in the nagiosxi/includes/comComponents/ccm/index.php script of the Core Configuration Manager monitoring tool for Nagios XI is related to the lack of security measures taken to protect the SQL query structure when processing parameters tfFirstNotif, tfLastNotif, and...

PT-2021-22866 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.5 Description: An issue was discovered in the Manage Dashlets section of the Admin panel, where an administrator can upload ZIP files. A command injection, within the name of the first file in the archive, allows an...