Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Nagios XI 5.7.5 Clear all filters
TI-2020-18996 CVE-2020-36861 · GHSA-p5jq-6372-24j5

Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages

Priority LOW 24

The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.8 / Nagios XI 5.7.5 contains multiple cross-site scripting (XSS) vulnerabilities in the overlay UI elements and the Notification/Check Period pages.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0042 Published 2025-10-30 Fixed in 5.7.5 CWE-79