Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Nagios XI 2024R1.1.2 Clear all filters
TI-2024-12996 CVE-2024-13993 · GHSA-f59v-q7cp-mw78

Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers

Priority LOW 31

Nagios XI versions prior to < 2024R1.1.2 are vulnerable to a reflected cross-site scripting (XSS) via the login page when accessed with older web browsers.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00795 Published 2025-10-30 Fixed in 2024R1.1.2 CWE-79
TI-2024-12998 CVE-2024-13995 · GHSA-wpjr-jgr7-59xw

Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure

Priority MEDIUM 40

Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01302 Published 2025-10-30 Fixed in 2024R1.1.2 CWE-497
TI-2024-12997 CVE-2024-13994 · GHSA-mcq5-4xw3-jc29

Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization

Priority MEDIUM 47

Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00918 Published 2025-10-30 Fixed in 2024R1.1.2 CWE-862