Vulnerabilities

TI-2020-19001 CVE-2020-36866 · GHSA-c8w5-3w25-7r9c

Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface

LOW 24

Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin interface.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0042 Published 2025-10-30 Fixed in 5.7.3 CWE-79

TI-2020-19003 CVE-2020-36868 · GHSA-xjhg-wrcc-8945

LOW 39

Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00338 Published 2025-10-30 Fixed in 5.7.3 CWE-250

TI-2020-19002 CVE-2020-36867 · GHSA-3qxh-pr59-jwh7

MEDIUM 44

Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02546 Published 2025-10-30 Fixed in 5.7.3 CWE-78