CVE-2025-56432

A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...

CVE-2025-56432

A cross-site scripting (XSS) vulnerability exists in Nagios XI version 2024R2 . The flaw is located in a web component responsible for rendering performance-related data . A remote attacker can exploit this by providing a specially crafted URL to execute arbitrary JavaScript within the session co...