Nagios

Log Server

8 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2025-44823

  • EPSS 0.96%
  • Published 07.10.2025 00:00:00
  • Last modified 07.10.2025 21:15:38

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.

8.5

CVE-2025-44824

  • EPSS 0.11%
  • Published 07.10.2025 00:00:00
  • Last modified 07.10.2025 20:15:35

Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Coul...

8.3

CVE-2025-29471

Exploit
  • EPSS 3.44%
  • Published 15.04.2025 00:00:00
  • Last modified 23.04.2025 16:30:10

Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.

5.4

CVE-2021-35478

Exploit
  • EPSS 49.2%
  • Published 30.07.2021 14:15:17
  • Last modified 21.11.2024 06:12:21

Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.

5.4

CVE-2021-35479

Exploit
  • EPSS 41.44%
  • Published 30.07.2021 14:15:17
  • Last modified 21.11.2024 06:12:21

Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page.

6.1

CVE-2020-25385

Exploit
  • EPSS 37.18%
  • Published 20.01.2021 01:15:13
  • Last modified 21.11.2024 05:17:55

Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapshot_name parameter, which may impact users who open a maliciously crafted link or third-party web page.

5.4

CVE-2020-16157

Exploit
  • EPSS 6.78%
  • Published 30.07.2020 15:15:13
  • Last modified 21.11.2024 05:06:52

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

6.1

CVE-2019-15898

Exploit
  • EPSS 7.95%
  • Published 03.09.2019 22:15:11
  • Last modified 21.11.2024 04:29:41

Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.