Nagios Xi vulnerabilities

CVE-2025-34283 [MEDIUM] CWE-497 CVE-2025-34283: Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API ac Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value.

CVE-2021-37223 [MEDIUM] CWE-918 CVE-2021-37223: Nagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in Nagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resou

CVE-2020-15902 [MEDIUM] CWE-79 CVE-2020-15902: Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option. Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.

CVE-2024-54960 [MEDIUM] CWE-89 CVE-2024-54960: A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL inject A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.

CVE-2024-13998 [MEDIUM] CVE-2024-13998: Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to that data. Exposure of API keys or password hashes could lead to account compromise, abuse of API privileges, or offline cracking attempts. CVE-2024-13

CVE-2013-10072 [MEDIUM] CWE-862 CVE-2013-10072: Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionali Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Discovery endpoints and pages that should require elevated permissions, exposing discovery results and allowing unintended access to discovery operations.

CVE-2021-37348 [HIGH] CWE-552 CVE-2021-37348: Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.

CVE-2025-34288 [MEDIUM] CWE-732 CVE-2025-34288: Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe i Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to t

CVE-2019-9166 [HIGH] CWE-732 CVE-2019-9166: Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and import_xiconfig.php.

CVE-2021-40343 [HIGH] CWE-732 CVE-2021-40343: An issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagios_unbundler.py fil An issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagios_unbundler.py file allow the nagios user to elevate their privileges to the root user.

CVE-2021-37345 [HIGH] CWE-269 CVE-2021-37345: Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is bei Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the var directory for some scripts with elevated permissions.

CVE-2021-37347 [HIGH] CWE-22 CVE-2021-37347: Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh doe Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argument.

CVE-2019-9167 [MEDIUM] CWE-79 CVE-2019-9167: Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbit Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter.

CVE-2019-20139 [MEDIUM] CWE-79 CVE-2019-20139: In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.

CVE-2021-37349 [HIGH] CVE-2021-37349: Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database.

CVE-2022-29271 [MEDIUM] CWE-863 CVE-2022-29271: In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able t In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.

CVE-2020-27991 [MEDIUM] CWE-79 CVE-2020-27991: Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field). Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).

CVE-2020-27990 [MEDIUM] CWE-79 CVE-2020-27990: Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent). Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).

CVE-2020-27989 [MEDIUM] CWE-79 CVE-2020-27989: Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard). Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).

CVE-2022-29269 [MEDIUM] CWE-79 CVE-2022-29269: In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to in In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that lead to the reformatting/editing of emails from an official email address.