Known vulnerabilities in Nagios

Vendor: nagios.org
Software: Nagios
Software CPE: cpe:2.3:a:nagios_org:nagios:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 21
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nagios Nagios is affected by 21 known vulnerabilities: 3 high, 4 medium, 14 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49148 - Cross-Site Request Forgery (CSRF)
CVE-2020-35269
CWE-352 Medium
No
No
- 23.12.2020 SB2020122409
#VU34362 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-13977
CWE-74 Medium
No
No
- 09.06.2020 SB2020060978
SB2021022007
SB2021022008
and 10 more
#VU34736 - Improper Access Control
CVE-2020-6584
CWE-284 Medium
No
No
- 16.03.2020 SB2020031621
#VU34737 - Cross-Site Request Forgery (CSRF)
CVE-2020-6585
CWE-352 High
No
No
- 16.03.2020 SB2020031621
#VU34738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6586
CWE-79 Low
No
No
- 16.03.2020 SB2020031621
#VU36804 - Improper Link Resolution Before File Access ('Link Following')
CVE-2016-8641
CWE-59 Low
Available
No
- 01.08.2018 SB2018080134
#VU14020 - NULL Pointer Dereference
CVE-2018-13441
CWE-476 Low
Available
No
- 23.07.2018 SB2018072615
#VU13100 - Permissions, Privileges, and Access Controls
CVE-2018-8736
CWE-264 Low
Available
No
- 31.05.2018 SB2018053107
#VU13099 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-8735
CWE-78 High
Available
No
- 31.05.2018 SB2018053107
#VU13098 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-8734
CWE-89 Low
Available
No
- 31.05.2018 SB2018053107
#VU13097 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-8733
CWE-89 Low
Available
No
- 31.05.2018 SB2018053107
#VU12776 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10738
CWE-89 Low
No
No
- 16.05.2018 SB2018051705
#VU12777 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10736
CWE-89 Low
No
No
- 16.05.2018 SB2018051705
#VU12778 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10735
CWE-89 Low
No
No
- 16.05.2018 SB2018051705
#VU12779 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10737
CWE-89 Low
No
No
- 16.05.2018 SB2018051705
#VU38893 - Use of Hard-coded Credentials
CVE-2016-0726
CWE-798 High
No
No
- 06.06.2017 SB2017033103
#VU39311 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6209
CWE-79 Low
No
No
- 31.03.2017 SB2017033103
#VU1344 - UNIX Symbolic Link (Symlink) Following
CVE-2016-9566
CWE-61 Low
Available
No
- 16.12.2016 SB2016121601
SB2016123102
SB2022101445
and 2 more
#VU33657 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-4703
CWE-59 Low
Available
No
- 05.12.2014 SB2014120514
SB2014072511
SB2015080505
and 4 more
#VU42050 - Permissions, Privileges, and Access Controls
CVE-2013-2214
CWE-264 Low
No
No
- 11.02.2014 SB2014021105


Showing elements 1 - 20 out of 21