Vulnerabilities

TI-2013-06211 CVE-2013-10071 · GHSA-3vg4-6fgq-6952

Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality

LOW 30

Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting (XSS) vulnerability in the dashboard dashlet AJAX load functionality.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00557 Published 2025-10-30 Fixed in 2012R1.6 CWE-79

TI-2013-06213 CVE-2013-10073 · GHSA-fgmx-3f4x-8543

MEDIUM 52

Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03377 Published 2025-10-30 Fixed in 2012R1.6 CWE-78

TI-2013-06212 CVE-2013-10072 · GHSA-vwm3-9rh9-v735

LOW 33

Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00754 Published 2025-10-30 Fixed in 2012R1.6 CWE-862