[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0Fps7gcxSWEPkhXKWEFbqlJCB103sqraTsgi9bSzis8":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":97,"kevVulnerabilities":159,"topProductsByCves":180,"seoMetadata":191,"meta":200},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":96},21017,"nagios",17,281,4,400,"2025-11-03","n",[16,21,27,33,38,44,48,53,57,62,68,73,77,81,84,87,92],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},115902,"nagios_xi",97,178,{"id":22,"product_name":8,"version_count":23,"cve_count":24,"kev_count":25,"last_cve_update":26},115899,87,37,0,"2020-06-09",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":25,"last_cve_update":32},115898,"log_server",23,22,"2025-10-30",{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":25,"last_cve_update":32},115896,"fusion",14,19,{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":25,"last_cve_update":43},115900,"nagios_core",66,5,"2020-12-23",{"id":45,"product_name":46,"version_count":47,"cve_count":42,"kev_count":25,"last_cve_update":32},115907,"network_analyzer",11,{"id":49,"product_name":50,"version_count":31,"cve_count":51,"kev_count":25,"last_cve_update":52},115908,"plugins",3,"2014-05-05",{"id":54,"product_name":55,"version_count":51,"cve_count":51,"kev_count":25,"last_cve_update":56},115897,"incident_manager","2019-03-28",{"id":58,"product_name":59,"version_count":60,"cve_count":51,"kev_count":25,"last_cve_update":61},115909,"remote_plug_in_executor",32,"2020-03-16",{"id":63,"product_name":64,"version_count":65,"cve_count":66,"kev_count":25,"last_cve_update":67},115901,"nagios_cross_platform_agent",27,2,"2024-01-24",{"id":69,"product_name":70,"version_count":71,"cve_count":66,"kev_count":25,"last_cve_update":72},115895,"favorites",1,"2021-02-03",{"id":74,"product_name":75,"version_count":71,"cve_count":71,"kev_count":25,"last_cve_update":76},115910,"remote_plugin_executor","2014-05-07",{"id":78,"product_name":79,"version_count":25,"cve_count":71,"kev_count":25,"last_cve_update":80},115903,"nagios_xi_docker_wizard","2021-08-13",{"id":82,"product_name":83,"version_count":25,"cve_count":71,"kev_count":25,"last_cve_update":80},115904,"nagios_xi_switch_wizard",{"id":85,"product_name":86,"version_count":25,"cve_count":71,"kev_count":25,"last_cve_update":80},115905,"nagios_xi_watchguard_wizard",{"id":88,"product_name":89,"version_count":90,"cve_count":71,"kev_count":25,"last_cve_update":91},115906,"ndoutils",15,"2024-08-07",{"id":93,"product_name":94,"version_count":71,"cve_count":71,"kev_count":25,"last_cve_update":95},115894,"business_process_intelligence","2018-02-06","Nagios is a technology vendor with 17 tracked products and 281 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[98,107,113,119,124,130,138,144,148,153],{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":105,"epssScore":106},"CVE-2021-25299","Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file \u002Fusr\u002Flocal\u002Fnagiosxi\u002Fhtml\u002Fadmin\u002Fsshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his\u002Fher session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.","2021-02-15",6.1,"v3.1","Medium",false,0.9776,{"cveId":108,"description":109,"publishedDate":80,"cvssScore":110,"cvssVersion":103,"severity":111,"isKev":105,"epssScore":112},"CVE-2021-37344","Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).",9.8,"Critical",0.96772,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":103,"severity":104,"isKev":105,"epssScore":118},"CVE-2021-38156","In Nagios XI before 5.8.6, XSS exists in the dashboard page (\u002Fdashboards\u002F#) when administrative users attempt to edit a dashboard.","2021-09-15",5.4,0.92909,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":117,"cvssVersion":103,"severity":104,"isKev":105,"epssScore":123},"CVE-2020-27988","Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).","2020-11-16",0.91311,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":110,"cvssVersion":128,"severity":111,"isKev":105,"epssScore":129},"CVE-2018-15708","Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.","2018-11-14","v3.0",0.89362,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":135,"severity":136,"isKev":105,"epssScore":137},"CVE-2009-2288","statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.","2009-07-01",7.5,"v2","High",0.83453,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"cvssVersion":103,"severity":136,"isKev":105,"epssScore":143},"CVE-2020-35578","An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands.","2021-01-13",7.2,0.81915,{"cveId":145,"description":146,"publishedDate":80,"cvssScore":110,"cvssVersion":103,"severity":111,"isKev":105,"epssScore":147},"CVE-2021-37350","Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.",0.7925,{"cveId":149,"description":150,"publishedDate":151,"cvssScore":142,"cvssVersion":103,"severity":136,"isKev":105,"epssScore":152},"CVE-2020-5791","Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user.","2020-10-20",0.78632,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"cvssVersion":103,"severity":136,"isKev":4,"epssScore":158},"CVE-2019-15949","Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root.","2019-09-05",8.8,0.77039,[160,168,172,176],{"cveId":161,"description":162,"publishedDate":101,"cvssScore":157,"cvssVersion":103,"severity":136,"isKev":4,"epssScore":163,"cisaVulnName":164,"cisaDateAdded":165,"cisaShortDescription":166,"cisaRequiredAction":167},"CVE-2021-25296","Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file \u002Fusr\u002Flocal\u002Fnagiosxi\u002Fhtml\u002Fincludes\u002Fconfigwizards\u002Fwindowswmi\u002Fwindowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.",0.71935,"Nagios XI OS Command Injection","2022-01-18","Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.","Apply updates per vendor instructions.",{"cveId":169,"description":170,"publishedDate":101,"cvssScore":157,"cvssVersion":103,"severity":136,"isKev":4,"epssScore":171,"cisaVulnName":164,"cisaDateAdded":165,"cisaShortDescription":166,"cisaRequiredAction":167},"CVE-2021-25297","Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file \u002Fusr\u002Flocal\u002Fnagiosxi\u002Fhtml\u002Fincludes\u002Fconfigwizards\u002Fswitch\u002Fswitch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.",0.56659,{"cveId":173,"description":174,"publishedDate":101,"cvssScore":157,"cvssVersion":103,"severity":136,"isKev":4,"epssScore":175,"cisaVulnName":164,"cisaDateAdded":165,"cisaShortDescription":166,"cisaRequiredAction":167},"CVE-2021-25298","Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file \u002Fusr\u002Flocal\u002Fnagiosxi\u002Fhtml\u002Fincludes\u002Fconfigwizards\u002Fcloud-vm\u002Fcloud-vm.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.",0.73641,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"cvssVersion":103,"severity":136,"isKev":4,"epssScore":158,"cisaVulnName":177,"cisaDateAdded":178,"cisaShortDescription":179,"cisaRequiredAction":167},"Nagios XI Remote Code Execution Vulnerability","2021-11-03","Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.",[181,182,183,184,185,186,187,188,189,190],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":8,"version_count":23,"cve_count":24,"kev_count":25,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":25,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":25,"last_cve_update":32},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":25,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":42,"kev_count":25,"last_cve_update":32},{"id":49,"product_name":50,"version_count":31,"cve_count":51,"kev_count":25,"last_cve_update":52},{"id":54,"product_name":55,"version_count":51,"cve_count":51,"kev_count":25,"last_cve_update":56},{"id":58,"product_name":59,"version_count":60,"cve_count":51,"kev_count":25,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":66,"kev_count":25,"last_cve_update":67},{"title":192,"metaDescription":193,"keywords":194,"structuredData":195},"Nagios - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nagios covering 17 products with 281 tracked vulnerabilities including 0 critical and 4 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nagios vulnerabilities, Nagios security, Nagios CVE, Nagios threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nagios KEV, Nagios exploited vulnerabilities",{"@context":196,"@type":197,"name":198,"description":193,"url":199},"https:\u002F\u002Fschema.org","Organization","Nagios","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnagios",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":201,"apiVersion":202},"2026-10-16T23:16:46.223Z","3.0"]