XI
Product
XI
77
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 25Medium 47Low 0
Watch
Add XI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13998 | 6.5 | Nov 3 | Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure Affected: before 2024R1.1.3 |
| CVE-2013-10072 | 6.5 | Oct 30 | Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization Affected: before 2012R1.6 |
| CVE-2025-34283 | 6.5 | Oct 30 | Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes Affected: before 2024R1.4.2 |
| CVE-2020-36862 | 6.1 | Oct 30 | Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts Affected: before 5.6.11 |
| CVE-2024-13993 | 6.1 | Oct 30 | Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers Affected: before 2024R1.1.2 |
| CVE-2013-10071 | 6.1 | Oct 30 | Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality Affected: before 2012R1.6 |
| CVE-2024-14006 | 6.1 | Oct 30 | Nagios XI < 2024R1.2.2 Host Header Injection Affected: before 2024R1.2.2 |
| CVE-2021-47694 | 6.1 | Oct 30 | Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command Affected: before 5.8.6 |
| CVE-2024-14002 | 5.5 | Oct 30 | Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis Affected: before 2024R1.1.4 |
| CVE-2021-47698 | 5.4 | Nov 3 | Nagios XI < 5.8.7 XSS in Core UI Views URL handling Affected: before 5.8.7 |
| CVE-2024-13992 | 5.4 | Oct 31 | Nagios XI < 2024R1.1 XSS via Missing Page / 404 Affected: before 2024R1.1 |
| CVE-2011-10037 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks Affected: before 2011R1.9 |
| CVE-2021-47697 | 5.4 | Oct 30 | Nagios XI < 5.8.0 XSS via Views URL Handling Affected: before 5.8.0 |
| CVE-2018-25121 | 5.4 | Oct 30 | Nagios XI < 5.4.13 XSS via Views Page Affected: before 5.4.13 |
| CVE-2013-10074 | 5.4 | Oct 30 | Nagios XI < 2012R2.6 XSS via Tools Menu Affected: before 2012R2.6 |
| CVE-2011-10040 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions Affected: before 2011R1.9 |
| CVE-2016-15051 | 5.4 | Oct 30 | Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields Affected: before 5.2.4 |
| CVE-2011-10038 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via Recurring Downtime Script Affected: before 2011R1.9 |
| CVE-2021-47695 | 5.4 | Oct 30 | Nagios XI < 5.8.0 XSS via My Tools Page Affected: before 5.8.0 |
| CVE-2016-15053 | 5.4 | Oct 30 | Nagios XI < 5.2.4 XSS via “My Reports” Listing Affected: before 5.2.4 |
| CVE-2016-15052 | 5.4 | Oct 30 | Nagios XI < 5.2.4 XSS via Menu System Affected: before 5.2.4 |
| CVE-2020-36866 | 5.4 | Oct 30 | Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface Affected: before 5.7.3 |
| CVE-2023-7316 | 5.4 | Oct 30 | Nagios XI < 2024R1 XSS via Graph Explorer Affected: before 2024R1 |
| CVE-2023-7315 | 5.4 | Oct 30 | Nagios XI < 5.11.3 XSS via Graph Explorer Affected: before 5.11.3 |
| CVE-2024-14001 | 5.4 | Oct 30 | Nagios XI < 2024R1.1.3 XSS via Executive Summary Report Affected: before 2024R1.1.3 |
| CVE-2020-36864 | 5.4 | Oct 30 | Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting Affected: before 5.7.2 |
| CVE-2023-7318 | 5.4 | Oct 30 | Nagios XI < 2024R1.0.2 XSS via Core Command Expansion Affected: before 2024R1.0.2 |
| CVE-2024-14000 | 5.4 | Oct 30 | Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report Affected: before 2024R1.1.3 |
| CVE-2023-7313 | 5.4 | Oct 30 | Nagios XI < 5.11.3 XSS via Bulk Modifications Affected: before 5.11.3 |
| CVE-2020-36865 | 5.4 | Oct 30 | Nagios XI < 5.7.2 XSS via BPI Config Management Affected: before 5.7.2 |
| CVE-2021-47696 | 5.4 | Oct 30 | Nagios XI < 5.8.0 XSS via BPI Config ID Handling Affected: before 5.8.0 |
| CVE-2023-7314 | 5.4 | Oct 30 | Nagios XI < 5.11.3 XSS via Bandwidth Report Affected: before 5.11.3 |
| CVE-2011-10036 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler Affected: before 2011R1.9 |
| CVE-2011-10039 | 5.4 | Oct 30 | Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing Affected: before 2011R1.9 |
| CVE-2021-47699 | 5.4 | Oct 30 | Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form Affected: before 5.8.7 |
| CVE-2023-53688 | 5.4 | Oct 30 | Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay Affected: before 5.11.3 |
| CVE-2022-50587 | 5.4 | Oct 30 | Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text Affected: before 5.8.9 |
| CVE-2022-50586 | 5.4 | Oct 30 | Nagios XI < 5.8.9 Stored XSS via BPI Info URL Affected: before 5.8.9 |
| CVE-2022-50588 | 5.4 | Oct 30 | Nagios XI < 5.8.9 Stored XSS in Update Checking Affected: before 5.8.9 |
| CVE-2021-47689 | 5.4 | Oct 30 | Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages Affected: before 5.8.0 |
| CVE-2021-47691 | 5.4 | Oct 30 | Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page Affected: before 5.8.2 |
| CVE-2022-50584 | 5.4 | Oct 30 | Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows Affected: before 5.8.8 |
| CVE-2020-36861 | 5.4 | Oct 30 | Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages Affected: before 5.7.5 |
| CVE-2021-47690 | 5.4 | Oct 30 | Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals Affected: before 5.8.2 |
| CVE-2020-36860 | 5.4 | Oct 30 | Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages Affected: before 5.7.4 |
| CVE-2022-50585 | 5.4 | Oct 30 | Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input Affected: before 5.8.9 |
| CVE-2025-34135 | 4.4 | Oct 30 | Nagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files Affected: before 2024R1.4.2 |
Showing 47