Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Nagios Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2023-24035`	Exploitation statusNot confirmed	FixYes	Affected productNagios XI	Published09/14/2026	SeverityLow
`CVE-2023-24034`	Exploitation statusNot confirmed	FixYes	Affected productNagios XI	Published09/14/2026	SeverityLow
`CVE-2026-2041`Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productHost	Published02/20/2026	SeverityHigh
`CVE-2026-2043`Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productHost	Published02/20/2026	SeverityHigh
`CVE-2026-2042`Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productHost	Published02/20/2026	SeverityHigh
`CVE-2025-67255`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published12/29/2025	SeverityHigh
`CVE-2025-67254`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published12/29/2025	SeverityHigh
`CVE-2025-34288`Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo	Exploitation statusNot known exploited	FixYes	Affected productNagios XI	Published12/16/2025	SeverityHigh
`CVE-2025-34323`Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules	Exploitation statusPublic exploit	FixYes	Affected productLog Server	Published11/17/2025	SeverityHigh
`CVE-2025-34322`Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries	Exploitation statusPublic exploit	FixYes	Affected productLog Server	Published11/17/2025	SeverityHigh
`CVE-2021-47698`Nagios XI < 5.8.7 XSS in Core UI Views URL handling	Exploitation statusNot known exploited	FixYes	Affected productXI	Published11/03/2025	SeverityMedium
`CVE-2024-13997`Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published11/03/2025	SeverityCritical
`CVE-2024-13998`Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published11/03/2025	SeverityMedium
`CVE-2024-13992`Nagios XI < 2024R1.1 XSS via Missing Page / 404	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/31/2025	SeverityMedium
`CVE-2011-10037`Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks	Exploitation statusPublic exploit	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2021-47697`Nagios XI < 5.8.0 XSS via Views URL Handling	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2018-25121`Nagios XI < 5.4.13 XSS via Views Page	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2013-10074`Nagios XI < 2012R2.6 XSS via Tools Menu	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2011-10040`Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2016-15051`Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2011-10038`Nagios XI < 2011R1.9 XSS via Recurring Downtime Script	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2021-47695`Nagios XI < 5.8.0 XSS via My Tools Page	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2016-15053`Nagios XI < 5.2.4 XSS via “My Reports” Listing	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2016-15052`Nagios XI < 5.2.4 XSS via Menu System	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2020-36866`Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2023-7316`Nagios XI < 2024R1 XSS via Graph Explorer	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2023-7315`Nagios XI < 5.11.3 XSS via Graph Explorer	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2024-14001`Nagios XI < 2024R1.1.3 XSS via Executive Summary Report	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityMedium
`CVE-2020-36864`Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2023-7318`Nagios XI < 2024R1.0.2 XSS via Core Command Expansion	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2024-14000`Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityMedium
`CVE-2023-7313`Nagios XI < 5.11.3 XSS via Bulk Modifications	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2020-36865`Nagios XI < 5.7.2 XSS via BPI Config Management	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2021-47696`Nagios XI < 5.8.0 XSS via BPI Config ID Handling	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2023-7314`Nagios XI < 5.11.3 XSS via Bandwidth Report	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2011-10036`Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2011-10039`Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2021-47699`Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2023-53688`Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2023-7317`Nagios XI < 2024R1 Web SSH Terminal Missing Access Control	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityCritical
`CVE-2020-36863`Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2020-36862`Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2022-50587`Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2022-50586`Nagios XI < 5.8.9 Stored XSS via BPI Info URL	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2022-50588`Nagios XI < 5.8.9 Stored XSS in Update Checking	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2020-36869`Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2016-15050`Nagios XI < 5.2.4 SQL Injection in Notification Search	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2024-13996`Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2024-13993`Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2013-10071`Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2024-14008`Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2025-34286`Nagios XI < 2026R1 RCE via Run Check Command in CCM	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityCritical
`CVE-2024-14003`Nagios XI < 2024R1.2 RCE via NRDP Server Plugins	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2025-34134`Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2011-10035`Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2024-14009`Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2024-14004`Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityHigh
`CVE-2018-25123`Nagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2020-36868`Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2025-34287`Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2025-34135`Nagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityMedium
`CVE-2021-47700`Nagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2024-14006`Nagios XI < 2024R1.2.2 Host Header Injection	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityHigh
`CVE-2018-25122`Nagios XI < 5.4.13 Component Download Page RCE	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2024-14005`Nagios XI < 2024R1.2 Command Injection via Docker Wizard	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2020-36867`Nagios XI < 5.7.3 Command Injection in Report PDF Download	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2021-47689`Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2021-47691`Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2022-50584`Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2020-36861`Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2021-47690`Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2020-36860`Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2022-50585`Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2020-36859`Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2021-47693`Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2021-47694`Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityMedium
`CVE-2013-10073`Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2013-10072`Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2020-36857`Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2012-10063`Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2020-36856`Nagios XI < 5.6.14 Authenticated RCE command_test.php via address	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityCritical
`CVE-2024-14002`Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityHigh
`CVE-2025-34284`Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityCritical
`CVE-2024-13995`Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2025-34283`Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityHigh
`CVE-2024-13994`Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization	Exploitation statusNot known exploited	FixYes	Affected productXI	Published10/30/2025	SeverityHigh
`CVE-2024-13999`Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/30/2025	SeverityHigh
`CVE-2023-7319`Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu	Exploitation statusNot known exploited	FixYes	Affected productNetwork Analyzer	Published10/30/2025	SeverityMedium
`CVE-2025-34278`Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productNetwork Analyzer	Published10/30/2025	SeverityMedium
`CVE-2025-34280`Nagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal Function	Exploitation statusNot known exploited	FixYes	Affected productNetwork Analyzer	Published10/30/2025	SeverityHigh
`CVE-2023-7321`Nagios Log Server < 2.1.14 XSS via Snapshots Page	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityMedium
`CVE-2023-7323`Nagios Log Server < 2024R1 XSS via Create User Function	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityMedium
`CVE-2020-36858`Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityMedium
`CVE-2025-34298`Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityHigh
`CVE-2025-34277`Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityCritical
`CVE-2025-34272`Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityMedium
`CVE-2025-34273`Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityHigh
`CVE-2024-58273`Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityHigh
`CVE-2025-34274`Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityCritical
`CVE-2023-7322`Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access	Exploitation statusNot known exploited	FixYes	Affected productLog Server	Published10/30/2025	SeverityHigh