XI
Product
XI
77
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 25Medium 47Low 0
Watch
Add XI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13996 | 9.8 | Oct 30 | Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change Affected: before 2024R1.1.3 |
| CVE-2024-14003 | 9.8 | Oct 30 | Nagios XI < 2024R1.2 RCE via NRDP Server Plugins Affected: before 2024R1.2 |
| CVE-2012-10063 | 9.8 | Oct 30 | Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM Affected: before 2012R1.3 |
| CVE-2024-13994 | 9.8 | Oct 30 | Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization Affected: before 2024R1.1.2 |
| CVE-2024-13999 | 9.8 | Oct 30 | Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure Affected: before 2024R1.1.3 |
| CVE-2023-7317 | 8.8 | Oct 30 | Nagios XI < 2024R1 Web SSH Terminal Missing Access Control Affected: before 2024R1 |
| CVE-2020-36863 | 8.8 | Oct 30 | Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory Affected: before 5.7.2 |
| CVE-2016-15050 | 8.8 | Oct 30 | Nagios XI < 5.2.4 SQL Injection in Notification Search Affected: before 5.2.4 |
| CVE-2024-14004 | 8.8 | Oct 30 | Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf) Affected: before 2024R1.2 |
| CVE-2018-25122 | 8.8 | Oct 30 | Nagios XI < 5.4.13 Component Download Page RCE Affected: before 5.4.13 |
| CVE-2024-14005 | 8.8 | Oct 30 | Nagios XI < 2024R1.2 Command Injection via Docker Wizard Affected: before 2024R1.2 |
| CVE-2020-36867 | 8.8 | Oct 30 | Nagios XI < 5.7.3 Command Injection in Report PDF Download Affected: before 5.7.3 |
| CVE-2020-36859 | 8.8 | Oct 30 | Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages Affected: before 5.7.4 |
| CVE-2021-47693 | 8.8 | Oct 30 | Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text Affected: before 5.8.5 |
| CVE-2013-10073 | 8.8 | Oct 30 | Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection Affected: before 2012R1.6 |
| CVE-2020-36856 | 8.8 | Oct 30 | Nagios XI < 5.6.14 Authenticated RCE command_test.php via address Affected: before 5.6.14 |
| CVE-2025-34284 | 8.8 | Oct 30 | Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin Affected: before 2024R2 |
| CVE-2024-13995 | 8.8 | Oct 30 | Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure Affected: 2024R1.1 before 2024R1.1.2; 2024R1.1.1 before 2024R1.1.2 |
| CVE-2018-25123 | 7.8 | Oct 30 | Nagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component Affected: before 5.5.7 |
| CVE-2020-36868 | 7.8 | Oct 30 | Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script Affected: before 5.7.3 |
| CVE-2025-34287 | 7.8 | Oct 30 | Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl Affected: before 2024R2 |
| CVE-2021-47700 | 7.8 | Oct 30 | Nagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory Affected: before 5.8.7 |
| CVE-2024-13997 | 7.2 | Nov 3 | Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host Affected: before 2024R1.1.3 |
| CVE-2020-36869 | 7.2 | Oct 30 | Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page Affected: before 5.7.5 |
| CVE-2024-14008 | 7.2 | Oct 30 | Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard Affected: before 2024R1.3.2 |
| CVE-2025-34286 | 7.2 | Oct 30 | Nagios XI < 2026R1 RCE via Run Check Command in CCM Affected: before 2026R1 |
| CVE-2025-34134 | 7.2 | Oct 30 | Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI) Affected: before 2024R1.4.2 |
| CVE-2024-14009 | 7.2 | Oct 30 | Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile Affected: before 2024R1.0.1 |
| CVE-2020-36857 | 7.2 | Oct 30 | Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page Affected: before 5.6.14 |
| CVE-2011-10035 | 7.0 | Oct 30 | Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE Affected: before 2011R1.9 |
| CVE-2024-13998 | 6.5 | Nov 3 | Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure Affected: before 2024R1.1.3 |
| CVE-2013-10072 | 6.5 | Oct 30 | Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization Affected: before 2012R1.6 |
| CVE-2025-34283 | 6.5 | Oct 30 | Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes Affected: before 2024R1.4.2 |
| CVE-2020-36862 | 6.1 | Oct 30 | Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts Affected: before 5.6.11 |
| CVE-2024-13993 | 6.1 | Oct 30 | Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers Affected: before 2024R1.1.2 |
| CVE-2013-10071 | 6.1 | Oct 30 | Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality Affected: before 2012R1.6 |
| CVE-2024-14006 | 6.1 | Oct 30 | Nagios XI < 2024R1.2.2 Host Header Injection Affected: before 2024R1.2.2 |
| CVE-2021-47694 | 6.1 | Oct 30 | Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command Affected: before 5.8.6 |
| CVE-2024-14002 | 5.5 | Oct 30 | Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis Affected: before 2024R1.1.4 |
| CVE-2021-47698 | 5.4 | Nov 3 | Nagios XI < 5.8.7 XSS in Core UI Views URL handling Affected: before 5.8.7 |
| CVE-2024-13992 | 5.4 | Oct 31 | Nagios XI < 2024R1.1 XSS via Missing Page / 404 Affected: before 2024R1.1 |
| CVE-2011-10037 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks Affected: before 2011R1.9 |
| CVE-2021-47697 | 5.4 | Oct 30 | Nagios XI < 5.8.0 XSS via Views URL Handling Affected: before 5.8.0 |
| CVE-2018-25121 | 5.4 | Oct 30 | Nagios XI < 5.4.13 XSS via Views Page Affected: before 5.4.13 |
| CVE-2013-10074 | 5.4 | Oct 30 | Nagios XI < 2012R2.6 XSS via Tools Menu Affected: before 2012R2.6 |
| CVE-2011-10040 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions Affected: before 2011R1.9 |
| CVE-2016-15051 | 5.4 | Oct 30 | Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields Affected: before 5.2.4 |
| CVE-2011-10038 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via Recurring Downtime Script Affected: before 2011R1.9 |
| CVE-2021-47695 | 5.4 | Oct 30 | Nagios XI < 5.8.0 XSS via My Tools Page Affected: before 5.8.0 |
| CVE-2016-15053 | 5.4 | Oct 30 | Nagios XI < 5.2.4 XSS via “My Reports” Listing Affected: before 5.2.4 |