Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Nagios XI 5.2.4 Clear all filters
TI-2016-09171 CVE-2016-15051 · GHSA-vw36-82p7-rrqj

Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields

Priority LOW 24

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Reports interface through values from the startdate and enddate fields.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0042 Published 2025-10-30 Fixed in 5.2.4 CWE-79
TI-2016-09173 CVE-2016-15053 · GHSA-2mqf-crhf-c264

Nagios XI < 5.2.4 XSS via “My Reports” Listing

Priority LOW 24

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the “My Reports” listing of the web interface.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00446 Published 2025-10-30 Fixed in 5.2.4 CWE-79
TI-2016-09172 CVE-2016-15052 · GHSA-m82p-4hfp-2w2f

Nagios XI < 5.2.4 XSS via Menu System

Priority LOW 24

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Menu System of the web interface.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00446 Published 2025-10-30 Fixed in 5.2.4 CWE-79
TI-2016-09170 CVE-2016-15050 · GHSA-pxr6-fppq-v964

Nagios XI < 5.2.4 SQL Injection in Notification Search

Priority MEDIUM 42

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01108 Published 2025-10-30 Fixed in 5.2.4 CWE-89