CVE-2018-12501

Nagios Fusion prior to 4.1.4 is affected by a cross-site scripting (XSS) vulnerability (CVE-2018-12501) in the web interface. The issue, also referred to as TPS#13332-13335, is documented across multiple sources (Red Hat, CNVD, NVD, CVE lists). The vulnerability arises in Nagios Fusion’s handling...

CVE-2023-53689

Nagios Fusion

CVE-2023-7312

Nagios Fusion is affected by a stored XSS in Email Settings for versions prior to 4.2.0. The vulnerability arises from insufficient input sanitization, allowing unsanitized input to be stored and later rendered in the administrative UI, enabling JavaScript execution in the browsers of users viewi...

CVE-2023-53690

Nagios Fusion (versions prior to 4.2.0) is affected by a stored XSS vulnerability in the LDAP/AD authentication-server configuration. The flaw arises from unsanitized input that can be stored and later rendered in the administrative UI, causing JavaScript execution in users’ browsers when viewing...

CVE-2018-25119

CVE-2018-25119 affects Nagios Fusion versions prior to 4.1.5. The issue is a cross-site scripting (XSS) vulnerability due to insufficient validation/escaping of the fusionwindow parameter, allowing attacker-supplied script to run in a victim’s browser. Affected software is disclosed across multip...