Description
The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nagios | Nagios XI | <5.8.4 | — |
Advisories 1
- WID-SEC-2025-0911 Nagios Enterprises Nagios XI: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2025