Nagios

Records303All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high102CVSS 7.0–8.9

Exploited now

Nagios records in CISA KEV

TI-2021-07543 Nagios XI OS Command Injection CRITICAL 97KEV 2022-01-18 TI-2021-07544 Nagios XI OS Command Injection CRITICAL 97KEV 2022-01-18 TI-2021-07545 Nagios XI OS Command Injection CRITICAL 97KEV 2022-01-18 TI-2019-11993 Nagios XI Remote Code Execution Vulnerability CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Nagios Xi 192 records CRITICAL Nagios 37 records HIGH Log Server 23 records HIGH Fusion 19 records MEDIUM Network Analyzer 7 records MEDIUM Nagios Core 5 records MEDIUM Incident Manager 3 records MEDIUM Plugins 3 records MEDIUM

Records

7 records in Network Analyzer · all components

TI-2021-09866 CVE-2021-28925 · GHSA-4m39-qr49-pfjv

SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.

MEDIUM 50

SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04817 Published 2021-04-08 No fix listed CWE-89

TI-2025-24418 CVE-2025-34280 · GHSA-vg8x-3rq9-ch3c

Nagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal Function

MEDIUM 48

Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01428 Published 2025-10-30 Fixed in 2024R2.0.1 CWE-78

TI-2025-20700 CVE-2025-28059 · GHSA-rw8h-4h76-h2mx

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted…

MEDIUM 40

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00833 Published 2025-04-18 No fix listed CWE-613

TI-2021-09865 CVE-2021-28924 · GHSA-cmfg-x8c8-g6xw

Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.

MEDIUM 40

Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10433 Published 2021-04-08 No fix listed CWE-79

TI-2025-24417 CVE-2025-34278 · GHSA-75j9-fg6j-3gvg

Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS

LOW 25

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00756 Published 2025-10-30 Fixed in 2024R1 CWE-79

TI-2023-06686 CVE-2023-7319 · GHSA-5jcg-35jx-5h27

Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu

LOW 24

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calculator menu.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00511 Published 2025-10-30 Fixed in 2024R1 CWE-79

TI-2025-20724 CVE-2025-28131 · GHSA-jrg4-7p24-jjmf

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows…

LOW 21

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical r…

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00408 Published 2025-04-01 No fix listed CWE-285

Open these records in search →