Vulnerabilities in Nagios
119 resultsCVE-2020-36856CRITICALNagios XI < 5.6.14 Authenticated RCE command_test.php via addressEPSS 2.5%CVE-2025-34134CRITICALNagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)EPSS 2.4%CVE-2025-34286CRITICALNagios XI < 2026R1 RCE via Run Check Command in CCMEPSS 2.4%CVE-2024-14008CRITICALNagios XI < 2024R1.3.2 RCE via WinRM Configuration WizardEPSS 2.4%CVE-2024-14003CRITICALNagios XI < 2024R1.2 RCE via NRDP Server PluginsEPSS 2.3%CVE-2020-36857HIGHNagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface PageEPSS 2.3%CVE-2025-34277CRITICALNagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard IDEPSS 2.2%CVE-2025-34274CRITICALNagios Log Server < 2024R2.0.3 Logstash Process Root PrivilegesEPSS 2.1%CVE-2020-36869HIGHNagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit PageEPSS 2.0%CVE-2024-13999HIGHNagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information DisclosureEPSS 1.9%CVE-2021-4285LOWNagios NCPA tail.html cross site scriptingEPSS 1.8%CVE-2024-13986HIGHNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCEEPSS 1.7%CVE-2024-14002HIGHNagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVisEPSS 1.7%CVE-2018-25122HIGHNagios XI < 5.4.13 Component Download Page RCEEPSS 1.7%CVE-2023-7317CRITICALNagios XI < 2024R1 Web SSH Terminal Missing Access ControlEPSS 1.7%CVE-2025-34280HIGHNagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal FunctionEPSS 1.4%CVE-2020-36863HIGHNagios XI < 5.7.2 Unrestricted File Upload via Audio Import DirectoryEPSS 1.4%CVE-2024-13995HIGHNagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information DisclosureEPSS 1.3%CVE-2023-24034LOWAn issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by usinEPSS 1.3%CVE-2024-13997CRITICALNagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on HostEPSS 1.2%