Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

XI — Vulnerabilities & Security Advisories 77

All 77 CVE vulnerabilities found in XI, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the vendor XI, focusing on the product named XI across various weakness types and security tags. The collection encompasses reported security flaws ranging from remote code execution and privilege escalation to denial of service and information disclosure, covering the historical timeline from the product's initial release to the present day. Users can utilize this resource to track the vendor's official security advisories, understand the specific characteristics and impact of a particular weakness class within the XI ecosystem, or review the complete vulnerability history of the product to assess its long-term security posture. The data is compiled from public sources and vendor announcements to provide a centralized view of known risks without including specific CVE identifiers in this summary. This aggregation supports security professionals and system administrators in conducting risk assessments, planning remediation strategies, and maintaining compliance with security standards by offering a consolidated view of the threat landscape associated with the XI product line. The information presented here is intended for defensive security purposes and reflects the current state of known vulnerabilities as documented by the security community and the vendor.

Vendor: Nagios

CVE ID Title CVSS Severity Published
CVE-2021-47690 Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals CWE-79 6.1AI Medium AI 2025-10-30
CVE-2020-36860 Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages CWE-79 5.4AI Medium AI 2025-10-30
CVE-2022-50585 Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input CWE-79 5.4AI Medium AI 2025-10-30
CVE-2020-36859 Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages CWE-89 8.8AI High AI 2025-10-30
CVE-2021-47693 Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text CWE-89 8.8AI High AI 2025-10-30
CVE-2021-47694 Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command CWE-79 6.1AI Medium AI 2025-10-30
CVE-2013-10073 Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection CWE-78 8.8AI High AI 2025-10-30
CVE-2013-10072 Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization CWE-862 7.1AI High AI 2025-10-30
CVE-2020-36857 Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page CWE-89 7.2AI High AI 2025-10-30
CVE-2012-10063 Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM CWE-89 8.1AI High AI 2025-10-30
CVE-2020-36856 Nagios XI < 5.6.14 Authenticated RCE command_test.php via address CWE-78 7.2AI High AI 2025-10-30
CVE-2024-14002 Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis CWE-98 7.1 High 2025-10-30
CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin CWE-78 9.4 Critical 2025-10-30
CVE-2024-13995 Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure CWE-497 8.1AI High AI 2025-10-30
CVE-2025-34283 Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes CWE-497 7.1 High 2025-10-30
CVE-2024-13994 Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization CWE-862 8.8AI High AI 2025-10-30
CVE-2024-13999 Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure CWE-497 7.3 High 2025-10-30

All 77 known CVE vulnerabilities affecting XI with full Chinese analysis, references, and POCs where available.