Skip to content
OpenAdvisories

Product · Nagios

Log Server

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.1
    CVE-2023-7321

    Nagios Log Server < 2.1.14 XSS via Snapshots Page

    Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the vic…

    Nagios Log Server
  • Medium 5.1
    CVE-2023-7323

    Nagios Log Server < 2024R1 XSS via Create User Function

    Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a v…

    Nagios Log Server
  • Medium 5.1
    CVE-2020-36858

    Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages

    Nagios Log Server versions prior to 2.1.6 contain cross-site scripting (XSS) vulnerabilities via the web interface on the Create User, Edit User, and Manage Host Lists pages. Insufficient validation or escaping of user-supplied input may allow an attacker to …

    Nagios Log Server
  • Medium 5.3
    CVE-2025-34272

    Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback

    In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being pres…

    Nagios Log Server
  • Medium 5.1
    CVE-2016-15049

    Nagios Log Server < 1.4.2 Dashboards Logs Table XSS

    Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled da…

    Nagios Log Server
  • Medium 6.9
    CVE-2025-34270

    Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated

    Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import. As a result, the plaintext password supplied for imported accounts may be exposed in the…

    Nagios Log Server