Login Request a demo
NA
Vendor
Nagios
20 products with CVEs on record
325
CVEs
4
On KEV
0
New 30D
Products
NX
Nagios XI
Nagios
9.8
194 CVEs4 on KEV0 new
NA
Nagios
Nagios
9.8
37 CVEs0 on KEV0 new
LS
Log Server
Nagios
9.8
23 CVEs0 on KEV0 new
FU
Fusion
Nagios
9.8
19 CVEs0 on KEV0 new
XI
XI
Nagios
9.8
17 CVEs0 on KEV0 new
NA
Network Analyzer
Nagios
9.8
7 CVEs0 on KEV0 new
NC
Nagios Core
Nagios
8.8
5 CVEs0 on KEV0 new
HO
Host
Nagios
8.8
3 CVEs0 on KEV0 new
IM
Incident Manager
Nagios
9.8
3 CVEs0 on KEV0 new
PL
Plugins
Nagios
–
3 CVEs0 on KEV0 new
RP
Remote Plug IN Executor
Nagios
7.5
3 CVEs0 on KEV0 new
FA
Favorites
Nagios
6.1
2 CVEs0 on KEV0 new
NC
Nagios Cross Platform Agent
Nagios
6.1
2 CVEs0 on KEV0 new
BP
Business Process Intelligence
Nagios
6.1
1 CVEs0 on KEV0 new
NN
Nagios Network Analyzer
Nagios
4.6
1 CVEs0 on KEV0 new
NX
Nagios XI Docker Wizard
Nagios
9.8
1 CVEs0 on KEV0 new
NX
Nagios XI Switch Wizard
Nagios
9.8
1 CVEs0 on KEV0 new
NX
Nagios XI Watchguard Wizard
Nagios
9.8
1 CVEs0 on KEV0 new
ND
Ndoutils
Nagios
7.8
1 CVEs0 on KEV0 new
RP
Remote Plugin Executor
Nagios
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-24035
NX
Nagios XI
Nagios
3.5
1%
Sep 14An issue was discovered in Nagios XI before 5.9.3
CVE-2023-24034
NX
Nagios XI
Nagios
3.1
1%
Sep 14An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3
CVE-2026-2041
HO
Host
Nagios
8.8
76%
Feb 20Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
CVE-2026-2043
HO
Host
Nagios
8.8
75%
Feb 20Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
CVE-2026-2042
HO
Host
Nagios
8.8
6%
Feb 20Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
CVE-2025-67254
NX
Nagios XI
Nagios
7.5
2%
Dec 29NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php
CVE-2025-67255
NX
Nagios XI
Nagios
8.8
1%
Dec 29In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability
CVE-2025-34288
NX
Nagios XI
Nagios
6.7
2%
Dec 16Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions
CVE-2025-34323
LS
Log Server
Nagios
7.8
0%
Nov 17Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application…
CVE-2025-34322
LS
Log Server
Nagios
7.2
9%
Nov 17Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature
CVE-2021-47698
NX
Nagios XI
Nagios
5.4
0%
Nov 3Nagios XI versions prior to 5.8.7 using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via the Core UI’s Views URL handling (escape_string())
CVE-2024-13997
XI
XI
Nagios
7.2
1%
Nov 3Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host
CVE-2024-13998
XI
XI
Nagios
6.5
1%
Nov 3Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure
CVE-2024-13992
NX
Nagios XI
Nagios
5.4
1%
Oct 31Nagios XI versions prior to < 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the "missing page" (404) page after following a link from another website
CVE-2025-34298
LS
Log Server
Nagios
8.8
1%
Oct 30Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow
CVE-2025-34287
NX
Nagios XI
Nagios
7.8
0%
Oct 30Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which is executed periodically as the nagios user but owned by www-data
CVE-2025-34286
NX
Nagios XI
Nagios
7.2
2%
Oct 30Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command
CVE-2025-34280
NA
Network Analyzer
Nagios
7.2
1%
Oct 30Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to…
CVE-2025-34278
NA
Network Analyzer
Nagios
5.4
1%
Oct 30Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu). An attacker can…
CVE-2025-34277
LS
Log Server
Nagios
9.8
2%
Oct 30Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an…
CVE-2025-34274
LS
Log Server
Nagios
9.8
2%
Oct 30Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user
CVE-2025-34273
LS
Log Server
Nagios
6.5
1%
Oct 30Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards
CVE-2025-34272
LS
Log Server
Nagios
6.5
1%
Oct 30In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default…
CVE-2025-34271
LS
Log Server
Nagios
9.8
1%
Oct 30Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted…
CVE-2025-34270
LS
Log Server
Nagios
4.9
1%
Oct 30Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import
CVE-2024-58273
LS
Log Server
Nagios
7.8
0%
Oct 30Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the…
CVE-2024-13995
NX
Nagios XI
Nagios
8.8
1%
Oct 30Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and hashed passwords) to…
CVE-2024-13994
NX
Nagios XI
Nagios
9.8
1%
Oct 30Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled. Under this configuration, any user can create…
CVE-2024-13993
NX
Nagios XI
Nagios
6.1
1%
Oct 30Nagios XI versions prior to < 2024R1.1.2 are vulnerable to a reflected cross-site scripting (XSS) via the login page when accessed with older web browsers
CVE-2023-7323
LS
Log Server
Nagios
5.4
1%
Oct 30Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function
CVE-2023-7322
LS
Log Server
Nagios
8.1
1%
Oct 30Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability
CVE-2023-7321
LS
Log Server
Nagios
5.4
1%
Oct 30Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page
CVE-2023-7319
NA
Network Analyzer
Nagios
5.4
1%
Oct 30Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calculator menu
CVE-2023-7318
NX
Nagios XI
Nagios
5.4
1%
Oct 30Nagios XI versions prior to < 2024R1.0.2 are vulnerable to cross-site scripting (XSS) via the Nagios Core Command Expansion page
CVE-2023-7317
NX
Nagios XI
Nagios
8.8
2%
Oct 30Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the…
CVE-2023-7316
NX
Nagios XI
Nagios
5.4
1%
Oct 30Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may…
CVE-2023-7315
NX
Nagios XI
Nagios
5.4
1%
Oct 30Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may…
CVE-2023-7314
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component. Insufficient validation or escaping of user-supplied input may…
CVE-2023-7313
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool
CVE-2023-7312
FU
Fusion
Nagios
4.8
1%
Oct 30Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings
CVE-2023-53690
FU
Fusion
Nagios
4.8
1%
Oct 30Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be…
CVE-2023-53689
FU
Fusion
Nagios
4.8
1%
Oct 30Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of…
CVE-2023-53688
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) via the Hypermap Replay component
CVE-2022-50588
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the update checking feature
CVE-2022-50587
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) via the Apply Configuration error text
CVE-2022-50586
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the BPI component via the info URL field
CVE-2022-50585
NX
Nagios XI
Nagios
5.4
0%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.7 / Nagios XI 5.8.9 contains a cross-site scripting (XSS) vulnerability via the Audit Log page search input
CVE-2022-50584
NX
Nagios XI
Nagios
5.4
0%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.6 / Nagios XI 5.8.8 contains a cross-site scripting (XSS) vulnerability via the search and deletion…
CVE-2021-47700
NX
Nagios XI
Nagios
7.8
0%
Oct 30Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user
CVE-2021-47699
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.7 are vulnerable to cross-site scripting (XSS) via the Audit Log page’s Send to NLS form
CVE-2021-47697
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via the Views feature URL handling
CVE-2021-47696
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via BPI config ID handling
CVE-2021-47695
NX
Nagios XI
Nagios
5.4
0%
Oct 30Nagios XI versions prior to 5.8.0 are vulnerable to stored cross-site scripting (XSS) via the My Tools page
CVE-2021-47694
NX
Nagios XI
Nagios
6.1
1%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.4 / Nagios XI 5.8.6 contains a reflected cross-site scripting (XSS) vulnerability via the Test Command…
CVE-2021-47693
NX
Nagios XI
Nagios
8.8
1%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulnerability in the search text handling. Unsanitized…
CVE-2021-47691
NX
Nagios XI
Nagios
5.4
0%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities via the Services page…
CVE-2021-47690
NX
Nagios XI
Nagios
5.4
0%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities in Overlay modals
CVE-2021-47689
NX
Nagios XI
Nagios
5.4
0%
Oct 30The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.0 / Nagios XI 5.8.0 contais a cross-site scripting (XSS) vulnerability in the Templates pages, specifically in…
CVE-2020-36869
NX
Nagios XI
Nagios
7.2
2%
Oct 30Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page
CVE-2020-36868
NX
Nagios XI
Nagios
7.8
0%
Oct 30Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script