Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Nagios XI 2024R1.1.3 Clear all filters
TI-2024-13004 CVE-2024-14001 · GHSA-42h4-7cw5-mjmj

Nagios XI < 2024R1.1.3 XSS via Executive Summary Report

Priority LOW 24

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Executive Summary Report component.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00587 Published 2025-10-30 Fixed in 2024R1.1.3 CWE-79
TI-2024-13003 CVE-2024-14000 · GHSA-m92p-3ph9-r4g2

Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report

Priority LOW 24

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Capacity Planning Report component.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00587 Published 2025-10-30 Fixed in 2024R1.1.3 CWE-79
TI-2024-13002 CVE-2024-13999 · GHSA-248r-c6gj-jwpq

Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure

Priority LOW 36

Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user.

CVSS 4.0HIGH 7.3 Network Low privileges No interaction EPSS 0.01883 Published 2025-10-30 Fixed in 2024R1.1.3 CWE-497