DeutschShown in its original language — a full translation is planned for a future version.
Nagios Enterprises Nagios XI: Mehrere Schwachstellen
view advisory published 2025-10-30
Ein Angreifer kann mehrere Schwachstellen in Nagios Enterprises Nagios XI ausnutzen, um beliebigen Programmcode zum Teil sogar mit Administratorrechten auszuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-34287US | high7.8 | — | ||
Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which is executed periodically as the nagios user but owned by www-data. Because the fil… | ||||
| CVE-2025-34286US | high7.2 | — | ||
Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command. Insufficient validation/escaping of parameters… | ||||
| CVE-2025-34284US | high8.8 | — | ||
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated admini… | ||||
| CVE-2025-34283US | medium6.5 | — | ||
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges cou… | ||||
| CVE-2025-34135US | medium4.4 | — | ||
Nagios XI versions prior to 2024R1.4.2 configure some systemd unit files with permission sets that were too permissive. In particular, the nagios.service unit had executable permis… | ||||
| CVE-2025-34134US | high7.2 | — | ||
Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence (BPI) component. Insufficient validation and sanitization… | ||||
02
references
External citations — patches, advisories, analysis.
- NIST Vulnerability Database vom 2025-10-30external
- NIST Vulnerability Database vom 2025-10-30external
- NIST Vulnerability Database vom 2025-10-30external
- NIST Vulnerability Database vom 2025-10-30external
- NIST Vulnerability Database vom 2025-10-30external
- NIST Vulnerability Database vom 2025-10-30external
- WID-SEC-W-2025-2459 - CSAF Versionself
- WID-SEC-2025-2459 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan