Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Nagios XI 5.11.3 Clear all filters
TI-2023-06682 CVE-2023-7315 · GHSA-cvh9-3mpx-5p4r

Nagios XI < 5.11.3 XSS via Graph Explorer

Priority LOW 24

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00513 Published 2025-10-30 Fixed in 5.11.3 CWE-79
TI-2023-06680 CVE-2023-7313 · GHSA-8x6f-f882-qfh8

Nagios XI < 5.11.3 XSS via Bulk Modifications

Priority LOW 24

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00487 Published 2025-10-30 Fixed in 5.11.3 CWE-79
TI-2023-06681 CVE-2023-7314 · GHSA-66qm-mpmg-rpq7

Nagios XI < 5.11.3 XSS via Bandwidth Report

Priority LOW 24

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00487 Published 2025-10-30 Fixed in 5.11.3 CWE-79
TI-2023-29976 CVE-2023-53688 · GHSA-vgvw-hq2p-7666

Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay

Priority LOW 29

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) via the Hypermap Replay component.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00317 Published 2025-10-30 Fixed in 5.11.3 CWE-352