Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Nagios XI 2011R1.9 Clear all filters
TI-2011-04639 CVE-2011-10037 · GHSA-8pr9-vvj4-gx32

Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks

Priority MEDIUM 56

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of xiwindow variables used to build permalinks in the web interface.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00607 Published 2025-10-30 Fixed in 2011R1.9 CWE-79
TI-2011-04642 CVE-2011-10040 · GHSA-vqcj-w8vp-2m7x

Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions

Priority LOW 24

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00444 Published 2025-10-30 Fixed in 2011R1.9 CWE-79
TI-2011-04640 CVE-2011-10038 · GHSA-vxgw-44xc-h6c6

Nagios XI < 2011R1.9 XSS via Recurring Downtime Script

Priority LOW 24

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the recurring downtime script of the web interface.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00472 Published 2025-10-30 Fixed in 2011R1.9 CWE-79
TI-2011-04638 CVE-2011-10036 · GHSA-m4h2-vq52-xvqg

Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler

Priority LOW 24

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" JavaScript link.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00444 Published 2025-10-30 Fixed in 2011R1.9 CWE-79
TI-2011-04637 CVE-2011-10035 · GHSA-rmp9-wcq5-wff8

Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE

Priority LOW 34

Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00233 Published 2025-10-30 Fixed in 2011R1.9 CWE-367