| Max CVSS | 9.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-15901 | 7.5 |
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.
|
03-12-2022 - 14:33 | 22-07-2020 - 22:15 | |
| CVE-2020-15902 | 4.3 |
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.
|
16-11-2022 - 03:51 | 22-07-2020 - 22:15 | |
| CVE-2020-28648 | 9.0 |
Improper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an authenticated attacker to execute remote code.
|
18-10-2022 - 20:43 | 16-11-2020 - 03:15 | |
| CVE-2020-35578 | 9.0 |
An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands.
|
26-04-2021 - 17:34 | 13-01-2021 - 21:15 | |
| CVE-2018-8733 | 7.5 |
Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability.
|
03-10-2019 - 00:03 | 18-04-2018 - 00:29 | |
| CVE-2018-8736 | 9.0 |
A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root.
|
03-10-2019 - 00:03 | 18-04-2018 - 00:29 | |
| CVE-2018-8734 | 7.5 |
SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter.
|
05-03-2019 - 17:29 | 18-04-2018 - 00:29 | |
| CVE-2018-8735 | 9.0 |
Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.
|
04-03-2019 - 18:48 | 18-04-2018 - 00:29 | |
| CVE-2018-20172 | 4.3 |
An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashbox.php is not filtered, resulting in an XSS vulnerability.
|
07-01-2019 - 18:13 | 17-12-2018 - 15:29 | |
| CVE-2018-20171 | 4.3 |
An issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php is not filtered, resulting in an XSS vulnerability.
|
07-01-2019 - 18:11 | 17-12-2018 - 15:29 |