Nagios XI <= 2024R1.1.4 XSS Vulnerability

Nagios XI is prone to a cross-site scripting XSS vulnerability. Note: This VT is a duplicate of SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...

CVE-2024-42898

creationtimestamp| type| source ---|---|--- 2025-01-09 20:14:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113800228541689341 2025-01-09 20:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiovuzbv2i 2025-01-09 21:57:26+00:00| seen|...

CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...

CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...