Known vulnerabilities in Nagios XI - page 3

Vendor: nagios.org
Software: Nagios XI
Software CPE: cpe:2.3:a:nagios_org:nagios_xi:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 87
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nagios XI Nagios XI is affected by 87 known vulnerabilities: 15 high, 29 medium, 43 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34128 - Improper input validation
CVE-2020-15901		 CWE-20 High
No
No
 5.7.2 23.07.2020 SB2020072350
#VU29955 - Command injection
 CWE-77 High
No
No
 5.7.2 15.07.2020 SB2020071536
#VU29954 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 5.7.2 15.07.2020 SB2020071536
#VU29953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 5.7.2 15.07.2020 SB2020071536
#VU29952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 5.7.2 15.07.2020 SB2020071536
#VU29951 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Medium
No
No
 5.7.2 15.07.2020 SB2020071536
#VU29950 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 5.7.2 15.07.2020 SB2020071536
#VU27087 - Overly Permissive Cross-domain Whitelist
 CWE-942 Medium
No
No
 5.6.14 22.04.2020 SB2020042206
#VU27086 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 5.6.14 22.04.2020 SB2020042206
#VU27083 - Improper Control of Generation of Code ('Code Injection')
 CWE-94 Medium
No
No
 5.6.14 22.04.2020 SB2020042206
#VU27080 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 Medium
No
No
 5.6.14 22.04.2020 SB2020042206
#VU26718 - Improper Control of Generation of Code ('Code Injection')
 CWE-94 Medium
No
No
 5.6.13 08.04.2020 SB2020032307
#VU26717 - Permissions, Privileges, and Access Controls
 CWE-264 Medium
No
No
 5.6.13 08.04.2020 SB2020032307
#VU26314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10821		 CWE-79 Low
No
No
 5.6.13 23.03.2020 SB2020032307
#VU26313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10820		 CWE-79 Low
No
No
 5.6.13 23.03.2020 SB2020032307
#VU26312 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10819		 CWE-79 Low
No
No
 5.6.13 23.03.2020 SB2020032307
#VU25601 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 5.6.11 26.02.2020 SB2020022603
#VU25600 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 5.6.11 26.02.2020 SB2020022603
#VU23884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20139		 CWE-79 Low
No
No
 5.6.10 02.01.2020 SB2020010208
#VU23882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-20197		 CWE-78 High
No
No
 5.6.10 02.01.2020 SB2020010208


Showing elements 41 - 60 out of 87