Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Nagios Fusion 4.2.0 Clear all filters
TI-2023-29977 CVE-2023-53689 · GHSA-hfcv-97wg-h7wr

Nagios Fusion < 4.2.0 License Information Reflected XSS

Priority LOW 29

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user…

CVSS 4.0MEDIUM 6.0 Network High privileges User interaction EPSS 0.00885 Published 2025-10-30 Fixed in 4.2.0 CWE-79
TI-2023-29978 CVE-2023-53690 · GHSA-6q4w-8x5h-w5c4

Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS

Priority LOW 29

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.0082 Published 2025-10-30 Fixed in 4.2.0 CWE-79
TI-2023-06679 CVE-2023-7312 · GHSA-mv3v-fcv4-mcj5

Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail

Priority LOW 30

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.01003 Published 2025-10-30 Fixed in 4.2.0 CWE-79