Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
NagiosNagios Xi2024

10 matches found

CVE
CVE•added 2024/02/26 5:15 p.m.•8189 views

CVE-2024-24402

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component.

9.8CVSS6.9AI score0.19075EPSS
CVE
CVE•added 2024/02/26 5:15 p.m.•4274 views

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component.

9.8CVSS8.4AI score0.57847EPSS
CVE
CVE•added 2024/05/01 1:15 p.m.•58 views

CVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet.

9.8CVSS6.9AI score0.03376EPSS
CVE
CVE•added 2025/02/20 6:15 p.m.•53 views

CVE-2024-54961

Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users.

6.5CVSS6.4AI score0.00802EPSS
CVE
CVE•added 2025/01/09 8:15 p.m.•48 views

CVE-2024-42898

A cross-site scripting (XSS) vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page.

5.4CVSS5.9AI score0.00602EPSS
CVE
CVE•added 2025/02/20 6:15 p.m.•46 views

CVE-2024-54960

A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.

6.5CVSS7AI score0.00599EPSS
CVE
CVE•added 2025/02/20 6:15 p.m.•43 views

CVE-2024-54958

Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which are then stored and executed in the context of other users accessing the page.

6.1CVSS5.2AI score0.00541EPSS
CVE
CVE•added 2025/02/20 6:15 p.m.•40 views

CVE-2024-54959

Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross-Site Scripting (XSS).

6.1CVSS6.3AI score0.00541EPSS
CVE
CVE•added 2024/02/02 10:15 a.m.•33 views

CVE-2023-51072

A stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...

5.4CVSS5.2AI score0.01765EPSS
CVE
CVE•added 2025/02/27 8:16 p.m.•29 views

CVE-2024-54957

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent.

6.1CVSS6.7AI score0.00174EPSS