Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 24

Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the background color settings in Dashboards.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00446 Published 2025-10-30 Fixed in 5.7.2 CWE-79
Priority LOW 24

Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the BPI (Business Process Intelligence) component’s Config Management and Edit Config page.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0042 Published 2025-10-30 Fixed in 5.7.2 CWE-79