Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Nagios XI 5.8.0 Clear all filters
TI-2021-22314 CVE-2021-47697 · GHSA-v6f7-ffvc-p9q8

Nagios XI < 5.8.0 XSS via Views URL Handling

Priority LOW 24

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via the Views feature URL handling.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00446 Published 2025-10-30 Fixed in 5.8.0 CWE-79
TI-2021-22312 CVE-2021-47695 · GHSA-94gv-43w2-9f3r

Nagios XI < 5.8.0 XSS via My Tools Page

Priority LOW 24

Nagios XI versions prior to 5.8.0 are vulnerable to stored cross-site scripting (XSS) via the My Tools page.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00446 Published 2025-10-30 Fixed in 5.8.0 CWE-79
TI-2021-22313 CVE-2021-47696 · GHSA-m6rv-4f79-gr2c

Nagios XI < 5.8.0 XSS via BPI Config ID Handling

Priority LOW 24

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via BPI config ID handling.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00446 Published 2025-10-30 Fixed in 5.8.0 CWE-79
TI-2021-22307 CVE-2021-47689 · GHSA-jp7v-jpwq-p4pw

Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages

Priority LOW 24

The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.0 / Nagios XI 5.8.0 contais a cross-site scripting (XSS) vulnerability in the Templates pages, specifically in the UI logic that renders and handles th…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0044 Published 2025-10-30 Fixed in 5.8.0 CWE-79