Vulnerabilities

TI-2025-26347 CVE-2025-39665 · GHSA-2x34-p5xr-4cq8

Livestatus Injection in dynmaps

LOW 36

User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2025-12-03 Fixed in 1.9.48 CWE-203

TI-2024-31472 CVE-2024-47090 · GHSA-x3pm-6vfp-j66v

LOW 23

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00229 Published 2025-05-27 Fixed in 1.9.47 CWE-79

TI-2024-26072 CVE-2024-38866 · GHSA-vrmf-frv2-79w2

LOW 24

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00424 Published 2025-05-27 Fixed in 1.9.47 CWE-140

TI-2024-31475 CVE-2024-47093 · GHSA-xc5w-rmjg-qwhh

MEDIUM 41

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00532 Published 2024-12-19 Fixed in 1.9.42 CWE-79

TI-2023-24907 CVE-2023-46287 · GHSA-v4vw-f7vp-84w3

LOW 28

XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2023-10-20 No fix listed CWE-79

TI-2022-23252 CVE-2022-46945 · GHSA-hw4x-q63w-42vp

HIGH 72

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.04135 Published 2023-05-26 No fix listed CWE-22

TI-2022-03648 CVE-2022-3979 · GHSA-v69g-856v-c9cc

LOW 37

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0107 Published 2022-11-13 No fix listed CWE-704

TI-2021-12729 CVE-2021-33178 · GHSA-g6fj-g9qm-g5xw

LOW 33

The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01943 Published 2021-10-14 Fixed in 1.9.29 CWE-22

TI-2017-04200 CVE-2017-6393 · GHSA-cv5f-v25j-6m37

LOW 29

An issue was discovered in NagVis 1.9b12.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00958 Published 2017-03-02 No fix listed CWE-79