Nagios Xi Luki w zabezpieczeniach

Oś czasu

Wersja

5.11.0	6
5.11.1	6
5.8.6	6
2012R1.5b	6
2024R1.01	2

Przeciwdziałanie

Official Fix	14
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	10
Unproven	0
Not Defined	16

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	6
Network	20

Uwierzytelnianie

Not Defined	0
High	1
Low	20
None	5

Interakcja z użytkownikiem

Not Defined	0
Required	10
None	16

C3BM Index

Ostatni rok

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	7
≤6	4
≤7	6
≤8	5
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	9
≤6	7
≤7	3
≤8	3
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	6
≤5	2
≤6	7
≤7	6
≤8	3
≤9	1
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	1
≤7	4
≤8	1
≤9	1
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	5
<2k	14
<5k	7
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	26
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (23): 5.7, 5.7.1, 5.7.2, 5.7.3, 5.7.4, 5.7.5, 5.8, 5.8.1, 5.8.2, 5.8.3, 5.8.4, 5.8.5, 5.8.6, 5.11, 5.11.1, 5.11.2, 2011R1.9, 2012R1.5b, 2012r1.0, 2012r1.1, 2012r1.2, 2012r1.3, 2024R1.01

Typ oprogramowania: Log Management Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-02-26	3.5	3.2	Nagios XI npcd cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04	CVE-2024-24402
2024-02-26	6.3	5.7	Nagios XI monitoringwizard.php sql injection	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.07	CVE-2024-24401
2023-12-14	7.6	7.5	Nagios XI Bulk Modification Tool sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	CVE-2023-48084
2023-12-14	8.0	7.9	Nagios XI command_test.php Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.09	CVE-2023-48085
2023-09-20	4.4	4.4	Nagios XI Custom Logo cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-40932
2023-09-20	6.3	6.3	Nagios XI Core Configuration Manager sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01	CVE-2023-40934
2023-09-20	7.1	7.1	Nagios XI update_banner_message sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-40933
2023-09-20	6.0	6.0	Nagios XI POST Request banner_message-ajaxhelper.php sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-40931
2022-09-08	3.6	3.5	Nagios XI System Performance Settings Page cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-38251
2022-09-08	4.8	4.7	Nagios XI MTR cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-38249

16 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 16 results.

więcej wpisów autorstwa Nagios

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!