CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Nagios XI 5.7.5 Remote OS Command Injection Vulnerability (CVE-2021-25298) Security Advisory
[Affected Scope] Nagios XI version 5.7.5
[Impact] An authenticated attacker can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, potentially leading to full system compromise.
[Mitigation] Immediately upgrade Nagios XI to a patched version (5.8.0 or higher), or disable/restrict access to the vulnerable configuration wizard.
Nagios XI 5.7.5 Remote OS Command Injection Vulnerability (CVE-2021-25297) Security Advisory
[Affected Scope] Nagios XI version 5.7.5
[Impact] An authenticated attacker can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, potentially leading to full system compromise.
[Mitigation] Immediately upgrade to the latest patched version of Nagios XI, and restrict access to the vulnerable configuration wizard path.
Nagios XI 5.7.5 Remote OS Command Injection Vulnerability (CVE-2021-25296) Security Advisory
[Affected Scope] Nagios XI version 5.7.5
[Impact] Authenticated attackers can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, leading to complete system compromise.
[Mitigation] Immediately upgrade Nagios XI to the latest secure version (5.8.0 or higher) and restrict access to the web console.
Nagios XI Privilege Escalation Remote Code Execution Vulnerability (CVE-2019-15949) Analysis and Mitigation Guide
[Affected Scope] Nagios XI versions prior to 5.6.6
[Impact] An authenticated attacker with admin web privileges or local 'nagios' user access can abuse passwordless sudo configurations to execute arbitrary commands as root
[Mitigation] Immediately upgrade Nagios XI to version 5.6.6 or higher, and restrict write permissions on the check_plugin executable