auxiliary/scanner/http/nagios_xi_scanner
functionalNagios XI Scanner
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37343US | high8.8 | Exploit | ||
A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running N… | ||||
| CVE-2020-35578US | high7.2 | Exploit | ||
An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticat… | ||||
| CVE-2020-5792US | high7.2 | Exploit | ||
Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code wit… | ||||
| CVE-2020-5791US | high7.2 | Exploit | ||
Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privile… | ||||
| CVE-2019-15949US | high8.8OT critical | KEV | ||
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan