Known vulnerabilities in Nagios XI - page 4

Vendor: nagios.org
Software: Nagios XI
Software CPE: cpe:2.3:a:nagios_org:nagios_xi:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 87
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nagios XI Nagios XI is affected by 87 known vulnerabilities: 15 high, 29 medium, 43 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25848 - Permissions, Privileges, and Access Controls
CVE-2019-15949		 CWE-264 Low
Available
Exploited
 5.6.6 10.03.2020 SB2019090521
#VU23887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20139		 CWE-79 Low
No
No
 5.6.10 02.01.2020 SB2020010208
#VU23886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20139		 CWE-79 Low
No
No
 5.6.10 02.01.2020 SB2020010208
#VU23885 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20139		 CWE-79 Low
No
No
 5.6.10 02.01.2020 SB2020010208
#VU23883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20139		 CWE-79 Low
No
No
 5.6.10 02.01.2020 SB2020010208
#VU31038 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17146		 CWE-79 Low
No
No
 5.5.4 19.06.2019 SB2019061925
#VU31039 - Improper Access Control
CVE-2018-17148		 CWE-284 High
No
No
 5.5.4 19.06.2019 SB2019061925
#VU18741 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 5.6.3 11.06.2019 SB2019061106
#VU35889 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12279		 CWE-89 High
Available
No
 - 22.05.2019 SB2019052228
#VU18158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9167		 CWE-79 Medium
No
No
 5.5.11 09.04.2019 SB2019040904
#VU18157 - Incorrect Default Permissions
CVE-2019-9166		 CWE-276 Low
Available
No
 5.5.11 09.04.2019 SB2019040904
#VU18156 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-9164		 CWE-78 Medium
No
No
 5.5.11 09.04.2019 SB2019040904
#VU18155 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-9165		 CWE-89 High
No
No
 5.5.11 09.04.2019 SB2019040904
#VU16653 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20171		 CWE-79 Low
No
No
 5.5.8 21.12.2018 SB2018122115
#VU16652 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20172		 CWE-79 Low
No
No
 5.5.8 21.12.2018 SB2018122115
#VU16334 - Improper input validation
CVE-2018-19296		 CWE-20 High
No
No
 5.6.3 07.12.2018 SB2018120727
SB2018120728
SB2019061106
and 12 more
#VU36396 - Improper input validation
CVE-2018-15708		 CWE-20 High
Available
No
 - 14.11.2018 SB2018111423
#VU36397 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-15709		 CWE-78 High
No
No
 - 14.11.2018 SB2018111423
#VU36398 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-15710		 CWE-78 Low
Available
No
 - 14.11.2018 SB2018111423
#VU36399 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-15711		 CWE-78 High
No
No
 - 14.11.2018 SB2018111423


Showing elements 61 - 80 out of 87