FU
Product
Fusion
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 5Medium 8Low 0
Watch
Add Fusion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28909 | 8.8 | May 24 | Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts Affected: through 4.1.8 |
| CVE-2020-28906 | 8.8 | May 24 | Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root Affected: through 4.1.8 |
| CVE-2020-28905 | 8.8 | May 24 | Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination Affected: through 4.1.8 |
| CVE-2025-60425 | 8.6 | Oct 27 | Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a… Affected: 2024; 2024 |
| CVE-2025-60424 | 7.6 | Oct 27 | A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack Affected: 2024; 2024 |
Showing 5