VendorsNagiosnagios_xiany version
Vulnerabilities

Nagios Nagios Xi any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

148CVEs
CVE-2021-47697
Nagios XI < 5.8.0 XSS via Views URL Handling
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2016-15052
Nagios XI < 5.2.4 XSS via Menu System
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2020-36864
Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2016-15053
Nagios XI < 5.2.4 XSS via “My Reports” Listing
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2011-10036
Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2011-10040
Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2022-50588
Nagios XI < 5.8.9 Stored XSS in Update Checking
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2022-50587
Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2022-50586
Nagios XI < 5.8.9 Stored XSS via BPI Info URL
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2022-50585
Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2021-47698
Nagios XI < 5.8.7 XSS in Core UI Views URL handling
Published 2025-11-03 · Analyzed
5.4EPSS 0.004
CVE-2021-47689
Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2020-36866
Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface
Published 2025-10-30 · Modified
5.4EPSS 0.004
CVE-2020-36865
Nagios XI < 5.7.2 XSS via BPI Config Management
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2020-36861
Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2011-10039
Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2020-36860
Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2021-47690
Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2013-10074
Nagios XI < 2012R2.6 XSS via Tools Menu
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2016-15051
Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2021-47699
Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2022-50584
Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2018-25121
Nagios XI < 5.4.13 XSS via Views Page
Published 2025-10-30 · Analyzed
5.4EPSS 0.004
CVE-2023-53688
Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay
Published 2025-10-30 · Analyzed
5.4EPSS 0.003
CVE-2021-37351
Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded pages through a crafted HTTP request to the server.
Published 2021-08-13 · Modified
5.3EPSS 0.028
CVE-2025-34135
Nagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files
Published 2025-10-30 · Analyzed
5.1EPSS 0.003
CVE-2018-17147
Nagios XI before 5.5.4 has XSS in the auto login admin management page.
Published 2019-07-10 · Modified
4.8EPSS 0.027
CVE-2022-29270
In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address.
Published 2022-06-29 · Modified
4.3EPSS 0.034
← Prev4 / 4