Security feed

Nagios XI Remote Code Execution Vulnerability

Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root. CISA required action: Apply updates per vendor instructions.

Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-15949

Nagios XI

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2019-15949

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#3674 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement

Nagios XI OS Command Injection

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. CISA required action: Apply updates per vendor instructions.

Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-25297

Nagios XI

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2021-25297

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2921 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement

Nagios XI OS Command Injection

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. CISA required action: Apply updates per vendor instructions.

Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-25298

Nagios XI

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2021-25298

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2919 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement

Nagios XI OS Command Injection

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. CISA required action: Apply updates per vendor instructions.

Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-25296

Nagios XI

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2021-25296

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2918 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement