Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.3 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.2AI score0.00478EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.3 views

CVE-2025-34278

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.4CVSS5.7AI score0.00678EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.4 views

EUVD-2025-37215

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.1CVSS5.2AI score0.00678EPSS
Exploits0References4
OSV
OSV
added 2025/10/30 10:15 p.m.2 views

CVE-2025-34278

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.4CVSS5.6AI score0.00678EPSS
Exploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.6 views

CVE-2025-34278

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.4CVSS0.00678EPSS
Exploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.2 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00478EPSS
Exploits0References2
OSV
OSV
added 2025/10/30 10:15 p.m.2 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.9AI score0.00478EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 9:28 p.m.2 views

CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.8AI score0.00478EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/30 9:28 p.m.4 views

CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00478EPSS
Exploits0References2
CVE
CVE
added 2025/10/30 9:28 p.m.4 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are affected by a cross-site scripting (XSS) vulnerability in the Percentile Calculator menu. The root cause is insufficient validation or escaping of user-supplied input, which can allow an attacker to inject and execute arbitrary script in a vict...

5.4CVSS5.8AI score0.00478EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/10/30 9:28 p.m.7 views

CVE-2025-34278 Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.1CVSS0.00678EPSS
Exploits0References3
CVE
CVE
added 2025/10/30 9:28 p.m.7 views

CVE-2025-34278

CVE-2025-34278 affects Nagios Network Analyzer (versions prior to 2024R1). The issue is a stored XSS in the Source Groups page (percentile calculator menu) where an attacker-supplied payload is stored and later rendered in other users’ browsers, executing in the victim’s context. The redhat/europ...

5.4CVSS5.3AI score0.00678EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:28 p.m.3 views

CVE-2025-34278 Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.1CVSS5.3AI score0.00678EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.3 views

PT-2025-44492

Name of the Vulnerable Software and Affected Versions Nagios Network Analyzer versions prior to 2024R1 Description Nagios Network Analyzer is susceptible to a cross-site scripting XSS issue through the Percentile Calculator menu. This occurs due to inadequate validation or escaping of user-provid...

5.4CVSS6AI score0.00478EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.4 views

PT-2025-44519

Name of the Vulnerable Software and Affected Versions Nagios Network Analyzer versions prior to 2024R1 Description The software contains a stored cross-site scripting XSS issue within the Source Groups page, specifically in the percentile calculator menu. An attacker can inject a malicious payloa...

5.4CVSS5.6AI score0.00678EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.2 views

Nagios Network Analyzer 安全漏洞

Nagios Network Analyzer is an enterprise solution for monitoring and analyzing network traffic from Nagios, Inc. A security vulnerability exists in Nagios Network Analyzer versions prior to 2024R1 that stems from insufficient validation of user input in the Percentile Calculator menu, which could...

5.4CVSS6AI score0.00478EPSS
Exploits0References2
Rows per page
Query Builder