Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

XI Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2021-47698`Nagios XI < 5.8.7 XSS in Core UI Views URL handling	Exploitation statusNot known exploited	FixYes	Published11/03/2025	SeverityMedium
`CVE-2024-13997`Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host	Exploitation statusNot known exploited	FixYes	Published11/03/2025	SeverityCritical
`CVE-2024-13998`Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure	Exploitation statusNot known exploited	FixYes	Published11/03/2025	SeverityMedium
`CVE-2024-13992`Nagios XI < 2024R1.1 XSS via Missing Page / 404	Exploitation statusNot known exploited	FixYes	Published10/31/2025	SeverityMedium
`CVE-2011-10037`Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks	Exploitation statusPublic exploit	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47697`Nagios XI < 5.8.0 XSS via Views URL Handling	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2018-25121`Nagios XI < 5.4.13 XSS via Views Page	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2013-10074`Nagios XI < 2012R2.6 XSS via Tools Menu	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2011-10040`Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2016-15051`Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2011-10038`Nagios XI < 2011R1.9 XSS via Recurring Downtime Script	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47695`Nagios XI < 5.8.0 XSS via My Tools Page	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2016-15053`Nagios XI < 5.2.4 XSS via “My Reports” Listing	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2016-15052`Nagios XI < 5.2.4 XSS via Menu System	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36866`Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-7316`Nagios XI < 2024R1 XSS via Graph Explorer	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-7315`Nagios XI < 5.11.3 XSS via Graph Explorer	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2024-14001`Nagios XI < 2024R1.1.3 XSS via Executive Summary Report	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36864`Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-7318`Nagios XI < 2024R1.0.2 XSS via Core Command Expansion	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2024-14000`Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-7313`Nagios XI < 5.11.3 XSS via Bulk Modifications	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36865`Nagios XI < 5.7.2 XSS via BPI Config Management	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47696`Nagios XI < 5.8.0 XSS via BPI Config ID Handling	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-7314`Nagios XI < 5.11.3 XSS via Bandwidth Report	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2011-10036`Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2011-10039`Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47699`Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-53688`Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2023-7317`Nagios XI < 2024R1 Web SSH Terminal Missing Access Control	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2020-36863`Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2020-36862`Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2022-50587`Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2022-50586`Nagios XI < 5.8.9 Stored XSS via BPI Info URL	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2022-50588`Nagios XI < 5.8.9 Stored XSS in Update Checking	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36869`Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2016-15050`Nagios XI < 5.2.4 SQL Injection in Notification Search	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2024-13996`Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2024-13993`Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2013-10071`Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2024-14008`Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2025-34286`Nagios XI < 2026R1 RCE via Run Check Command in CCM	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2024-14003`Nagios XI < 2024R1.2 RCE via NRDP Server Plugins	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2025-34134`Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2011-10035`Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2024-14009`Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2024-14004`Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2018-25123`Nagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2020-36868`Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2025-34287`Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2025-34135`Nagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47700`Nagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2024-14006`Nagios XI < 2024R1.2.2 Host Header Injection	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2018-25122`Nagios XI < 5.4.13 Component Download Page RCE	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2024-14005`Nagios XI < 2024R1.2 Command Injection via Docker Wizard	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2020-36867`Nagios XI < 5.7.3 Command Injection in Report PDF Download	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2021-47689`Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47691`Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2022-50584`Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36861`Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2021-47690`Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36860`Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2022-50585`Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2020-36859`Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2021-47693`Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2021-47694`Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityMedium
`CVE-2013-10073`Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2013-10072`Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2020-36857`Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2012-10063`Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2020-36856`Nagios XI < 5.6.14 Authenticated RCE command_test.php via address	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2024-14002`Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2025-34284`Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityCritical
`CVE-2024-13995`Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2025-34283`Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2024-13994`Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh
`CVE-2024-13999`Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure	Exploitation statusNot known exploited	FixYes	Published10/30/2025	SeverityHigh

77 / 77 Results

All vulnerabilities loaded

Security vulnerabilities in XI

XI

How many security vulnerabilities does XI currently have?

Does the latest version of XI have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management