XI
Product
XI
77
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 25Medium 47Low 0
Watch
Add XI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-7317 | 8.8 | Oct 30 | Nagios XI < 2024R1 Web SSH Terminal Missing Access Control Affected: before 2024R1 |
| CVE-2020-36863 | 8.8 | Oct 30 | Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory Affected: before 5.7.2 |
| CVE-2016-15050 | 8.8 | Oct 30 | Nagios XI < 5.2.4 SQL Injection in Notification Search Affected: before 5.2.4 |
| CVE-2024-14004 | 8.8 | Oct 30 | Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf) Affected: before 2024R1.2 |
| CVE-2018-25122 | 8.8 | Oct 30 | Nagios XI < 5.4.13 Component Download Page RCE Affected: before 5.4.13 |
| CVE-2024-14005 | 8.8 | Oct 30 | Nagios XI < 2024R1.2 Command Injection via Docker Wizard Affected: before 2024R1.2 |
| CVE-2020-36867 | 8.8 | Oct 30 | Nagios XI < 5.7.3 Command Injection in Report PDF Download Affected: before 5.7.3 |
| CVE-2020-36859 | 8.8 | Oct 30 | Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages Affected: before 5.7.4 |
| CVE-2021-47693 | 8.8 | Oct 30 | Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text Affected: before 5.8.5 |
| CVE-2013-10073 | 8.8 | Oct 30 | Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection Affected: before 2012R1.6 |
| CVE-2020-36856 | 8.8 | Oct 30 | Nagios XI < 5.6.14 Authenticated RCE command_test.php via address Affected: before 5.6.14 |
| CVE-2025-34284 | 8.8 | Oct 30 | Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin Affected: before 2024R2 |
| CVE-2024-13995 | 8.8 | Oct 30 | Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure Affected: 2024R1.1 before 2024R1.1.2; 2024R1.1.1 before 2024R1.1.2 |
| CVE-2018-25123 | 7.8 | Oct 30 | Nagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component Affected: before 5.5.7 |
| CVE-2020-36868 | 7.8 | Oct 30 | Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script Affected: before 5.7.3 |
| CVE-2025-34287 | 7.8 | Oct 30 | Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl Affected: before 2024R2 |
| CVE-2021-47700 | 7.8 | Oct 30 | Nagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory Affected: before 5.8.7 |
| CVE-2024-13997 | 7.2 | Nov 3 | Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host Affected: before 2024R1.1.3 |
| CVE-2020-36869 | 7.2 | Oct 30 | Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page Affected: before 5.7.5 |
| CVE-2024-14008 | 7.2 | Oct 30 | Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard Affected: before 2024R1.3.2 |
| CVE-2025-34286 | 7.2 | Oct 30 | Nagios XI < 2026R1 RCE via Run Check Command in CCM Affected: before 2026R1 |
| CVE-2025-34134 | 7.2 | Oct 30 | Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI) Affected: before 2024R1.4.2 |
| CVE-2024-14009 | 7.2 | Oct 30 | Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile Affected: before 2024R1.0.1 |
| CVE-2020-36857 | 7.2 | Oct 30 | Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page Affected: before 5.6.14 |
| CVE-2011-10035 | 7.0 | Oct 30 | Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE Affected: before 2011R1.9 |
Showing 25