Login Request a demo
FU
Product
Fusion
by Nagios · last CVE Oct 30, 2025
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 6High 5Medium 8Low 0
Severity
All severities19Critical6High5Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fusion to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-28911
6.5
4%
May 24
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command…
Affected: through 4.1.8
CVE-2017-20209
6.1
1%
Oct 30
Nagios Fusion < 4.0.1 XSS via Users/Servers Page
Affected: before 4.0.1
CVE-2018-25119
6.1
1%
Oct 30
Nagios Fusion < 4.1.5 XSS via fusionwindow Parameter
Affected: before 4.1.5
CVE-2020-28903
6.1
13%
May 24
Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server to inject arbitrary HTML, aka XSS
Affected: through 4.1.8
CVE-2018-12501
6.1
2%
Jun 16
Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335
Affected: before 4.1.4
CVE-2023-53689
4.8
1%
Oct 30
Nagios Fusion < 4.2.0 License Information Reflected XSS
Affected: before 4.2.0
CVE-2023-53690
4.8
1%
Oct 30
Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS
Affected: before 4.2.0
CVE-2023-7312
4.8
1%
Oct 30
Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail
Affected: before 4.2.0
Showing 8