Known vulnerabilities in Nagios Fusion

Known vulnerabilities in Nagios Fusion

Vendor: nagios.org

Software: Nagios Fusion

Software CPE: cpe:2.3:a:nagios_org:nagios_fusion:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU53531 - Improper Access Control CVE-2020-28911	CWE-284	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53526 - Permissions, Privileges, and Access Controls CVE-2020-28909	CWE-264	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53525 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-28908	CWE-78	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53522 - Improper Certificate Validation CVE-2020-28907	CWE-295	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53521 - Permissions, Privileges, and Access Controls CVE-2020-28906	CWE-264	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53520 - Improper Control of Generation of Code ('Code Injection') CVE-2020-28905	CWE-94	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53519 - Execution with Unnecessary Privileges CVE-2020-28904	CWE-250	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53518 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-28903	CWE-79	Low	No	No	4.1.9	25.05.2021	SB2021052531
#VU53517 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-28902	CWE-78	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53516 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-28901	CWE-78	Medium	No	No	4.1.9	25.05.2021	SB2021052531
#VU53515 - Insufficient Verification of Data Authenticity CVE-2020-28900	CWE-345	Medium	No	No	4.1.9	25.05.2021	SB2021052531