Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Nagios Log Server 2024R2.0.3 Clear all filters
TI-2025-24413 CVE-2025-34272 · GHSA-5v2w-q8v2-gpf9

Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback

Priority LOW 26

In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00859 Published 2025-10-30 Fixed in 2024R2.0.3 CWE-200
TI-2025-24414 CVE-2025-34273 · GHSA-7c96-f262-gcw8

Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion

Priority LOW 35

Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01027 Published 2025-10-30 Fixed in 2024R2.0.3 CWE-863
TI-2025-24415 CVE-2025-34274 · GHSA-fmr7-xm73-cwcf

Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges

Priority MEDIUM 46

Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02076 Published 2025-10-30 Fixed in 2024R2.0.3 CWE-250