[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQP6XsxCh8XXEzbNwI6iFxGfaixs0dbrZdVNvlhYucLc":3,"g5a-ex:nagios\u002Flog_server@*":168,"g5a-family:nagios\u002Flog_server":170},{"success":4,"data":5},true,{"product":6,"versions":63,"topVulnerabilitiesByEpss":87,"kevVulnerabilities":145,"seoMetadata":146,"meta":165},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":62},"nagios","log_server",23,22,0,"2025-10-30",[14,17,19,21,23,25,27,29,31,33,35,38,40,42,44,46,48,50,52,54,56,58,60],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.1",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.2",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.3",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.4",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"2015",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.2",{"version":36,"cve_count":37,"kev_count":11,"has_kev":16},"2024",11,{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},"2026",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.3",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.4",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.5",{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.6",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.7",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.8",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.10",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.6",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.7",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.8",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.9","Log Server by Nagios is a technology product with 23 tracked versions and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":37,"kev_count":11,"has_kev":16},{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},[88,96,102,109,114,118,125,130,135,139],{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":93,"severity":94,"isKev":16,"epssScore":95},"CVE-2021-35478","Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.","2021-07-30",5.4,"v3.1","Medium",0.76624,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":93,"severity":94,"isKev":16,"epssScore":101},"CVE-2020-25385","Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in \u002Fnagioslogserver\u002Fconfigure\u002Fcreate_snapshot through the snapshot_name parameter, which may impact users who open a maliciously crafted link or third-party web page.","2021-01-20",6.1,0.1639,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":93,"severity":107,"isKev":16,"epssScore":108},"CVE-2025-44823","Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a \u002Fnagioslogserver\u002Findex.php\u002Fapi\u002Fsystem\u002Fget_users call. This is GL:NLS#475.","2025-10-07",9.9,"Critical",0.16118,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":92,"cvssVersion":93,"severity":94,"isKev":16,"epssScore":113},"CVE-2020-16157","A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.","2020-07-30",0.14414,{"cveId":115,"description":116,"publishedDate":91,"cvssScore":92,"cvssVersion":93,"severity":94,"isKev":16,"epssScore":117},"CVE-2021-35479","Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page.",0.13151,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":122,"cvssVersion":93,"severity":123,"isKev":16,"epssScore":124},"CVE-2025-29471","Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.","2025-04-15",8.3,"High",0.07276,{"cveId":126,"description":127,"publishedDate":105,"cvssScore":128,"cvssVersion":93,"severity":123,"isKev":16,"epssScore":129},"CVE-2025-44824","Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a \u002Fnagioslogserver\u002Findex.php\u002Fapi\u002Fsystem\u002Fstop?subsystem=elasticsearch call. The service stops even though \"message\": \"Could not stop elasticsearch\" is in the API response. This is GL:NLS#474.",8.5,0.02771,{"cveId":131,"description":132,"publishedDate":12,"cvssScore":133,"cvssVersion":93,"severity":107,"isKev":16,"epssScore":134},"CVE-2025-34277","Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an internal API. An attacker able to supply crafted dashboard ID values can cause the system to execute attacker-controlled data, leading to arbitrary code execution in the context of the Log Server process.",9.8,0.02154,{"cveId":136,"description":137,"publishedDate":12,"cvssScore":133,"cvssVersion":93,"severity":107,"isKev":16,"epssScore":138},"CVE-2025-34274","Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for example by exploiting an insecure plugin, pipeline configuration injection, or a vulnerability in input parsing - the attacker could execute code with root privileges, resulting in full system compromise. The Logstash service has been altered to run as the lower-privileged 'nagios' user to reduce this risk associated with a network-facing service that can accept untrusted input or load third-party components.",0.02076,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":100,"cvssVersion":143,"severity":94,"isKev":16,"epssScore":144},"CVE-2019-15898","Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.","2019-09-03","v3.0",0.016,[],{"title":147,"metaDescription":148,"keywords":149,"structuredData":150},"Log Server by Nagios - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Log Server by Nagios covering 23 versions with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Log Server vulnerabilities, Log Server security, Log Server CVE, Nagios Log Server, Log Server threat intelligence, Nagios security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":151,"@type":152,"name":153,"description":148,"url":154,"manufacturer":155,"applicationCategory":159,"softwareVersion":160,"mainEntity":161},"https:\u002F\u002Fschema.org","SoftwareApplication","Log Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnagios\u002Flog_server",{"@type":156,"name":157,"url":158},"Organization","Nagios","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnagios","Security Software","23 versions tracked",{"@type":162,"name":163,"description":164,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Log Server Security Vulnerabilities","Security vulnerabilities affecting Log Server by Nagios",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":166,"apiVersion":167},"2026-10-19T00:37:57.184Z","3.0",{"rows":169,"total":11,"capped":16,"failed":11},[],[]]