NX
Product
Nagios XI
On CISA KEVExploited in the wild
194
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 26High 71Medium 94Low 2
Watch
Add Nagios XI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13997 | 7.2 | Nov 3 | Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host Affected: before 2024; 2024; 2024; 2024; 2024; 2024; +1 more |
| CVE-2020-36869 | 7.2 | Oct 30 | Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page Affected: before 5.7.5 |
| CVE-2024-14008 | 7.2 | Oct 30 | Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard Affected: before 2024; 2024; 2024; 2024; 2024; 2024; +9 more |
| CVE-2025-34286 | 7.2 | Oct 30 | Nagios XI < 2026R1 RCE via Run Check Command in CCM Affected: before 2026 |
| CVE-2025-34134 | 7.2 | Oct 30 | Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI) Affected: before 2024; 2024; 2024; 2024; 2024; 2024; +14 more |
| CVE-2024-14009 | 7.2 | Oct 30 | Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile Affected: before 2024; 2024 |
| CVE-2020-36857 | 7.2 | Oct 30 | Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page Affected: before 5.6.14 |
| CVE-2023-40934 | 7.2 | Sep 19 | A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute… Affected: before 5.11.2 |
| CVE-2021-40345 | 7.2 | Oct 26 | An issue was discovered in Nagios XI 5.8.5 Affected: 5.8.5 |
| CVE-2021-40344 | 7.2 | Oct 26 | An issue was discovered in Nagios XI 5.8.5 Affected: 5.8.5 |
| CVE-2021-3277 | 7.2 | Jun 7 | Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads… Affected: through 5.7.5 |
| CVE-2021-3273 | 7.2 | Feb 25 | Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component Affected: before 5.7 |
| CVE-2020-22427 | 7.2 | Feb 15 | NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability Affected: 5.6.11 |
| CVE-2020-35578 | 7.2 | Jan 13 | An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0 Affected: before 5.8.0 |
| CVE-2020-5792 | 7.2 | Oct 20 | Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code… Affected: 5.7.3 |
| CVE-2020-5791 | 7.2 | Oct 20 | Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the… Affected: 5.6.0 through 5.7.3 |
| CVE-2018-10738 | 7.2 | May 16 | A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter Affected: 5.2.0 through 5.2.9; 5.4.0 before 5.4.13 |
| CVE-2018-10737 | 7.2 | May 16 | A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter Affected: 5.2.0 through 5.2.9; 5.4.0 before 5.4.13 |
| CVE-2018-10736 | 7.2 | May 16 | A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter Affected: 5.2.0 through 5.2.9; 5.4.0 before 5.4.13 |
| CVE-2018-10735 | 7.2 | May 16 | A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter Affected: 5.2.0 through 5.2.9; 5.4.0 before 5.4.13 |
| CVE-2011-10035 | 7.0 | Oct 30 | Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE Affected: through 2009; 2011; 2011; 2011; 2011; 2011; +4 more |