Description
A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-related data.
Advisories 1
- WID-SEC-2025-1909 Nagios Enterprises Nagios XI: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Aug 26, 2025