Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Nagios XI 2024R1.1.3 Clear all filters
TI-2024-13000 CVE-2024-13997 · GHSA-5359-gfvc-c3p7

Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

Priority MEDIUM 51

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.0121 Published 2025-11-03 Fixed in 2024R1.1.3 CWE-269
TI-2024-13001 CVE-2024-13998 · GHSA-2mr3-pj2m-q569

Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure

Priority LOW 29

Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to that data.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0104 Published 2025-11-03 Fixed in 2024R1.1.3 CWE-497