CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25298

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.771

EPSS Ranking 98.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

Proposed Action

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.

Ransomware Campaign

Unknown

References

Products affected by CVE-2021-25298

Nagios » Nagios Xi » Version: 5.5.10

cpe:2.3:a:nagios:nagios_xi:5.5.10
Nagios » Nagios Xi » Version: 5.5.11

cpe:2.3:a:nagios:nagios_xi:5.5.11
Nagios » Nagios Xi » Version: 5.5.6

cpe:2.3:a:nagios:nagios_xi:5.5.6
Nagios » Nagios Xi » Version: 5.5.7

cpe:2.3:a:nagios:nagios_xi:5.5.7
Nagios » Nagios Xi » Version: 5.5.8

cpe:2.3:a:nagios:nagios_xi:5.5.8
Nagios » Nagios Xi » Version: 5.5.9

cpe:2.3:a:nagios:nagios_xi:5.5.9
Nagios » Nagios Xi » Version: 5.6.0

cpe:2.3:a:nagios:nagios_xi:5.6.0
Nagios » Nagios Xi » Version: 5.6.1

cpe:2.3:a:nagios:nagios_xi:5.6.1
Nagios » Nagios Xi » Version: 5.6.11

cpe:2.3:a:nagios:nagios_xi:5.6.11
Nagios » Nagios Xi » Version: 5.6.2

cpe:2.3:a:nagios:nagios_xi:5.6.2
Nagios » Nagios Xi » Version: 5.6.3

cpe:2.3:a:nagios:nagios_xi:5.6.3
Nagios » Nagios Xi » Version: 5.6.4

cpe:2.3:a:nagios:nagios_xi:5.6.4
Nagios » Nagios Xi » Version: 5.6.5

cpe:2.3:a:nagios:nagios_xi:5.6.5
Nagios » Nagios Xi » Version: 5.6.6

cpe:2.3:a:nagios:nagios_xi:5.6.6
Nagios » Nagios Xi » Version: 5.6.7

cpe:2.3:a:nagios:nagios_xi:5.6.7
Nagios » Nagios Xi » Version: 5.6.8

cpe:2.3:a:nagios:nagios_xi:5.6.8
Nagios » Nagios Xi » Version: 5.6.9

cpe:2.3:a:nagios:nagios_xi:5.6.9
Nagios » Nagios Xi » Version: 5.7.0

cpe:2.3:a:nagios:nagios_xi:5.7.0
Nagios » Nagios Xi » Version: 5.7.1

cpe:2.3:a:nagios:nagios_xi:5.7.1
Nagios » Nagios Xi » Version: 5.7.2

cpe:2.3:a:nagios:nagios_xi:5.7.2
Nagios » Nagios Xi » Version: 5.7.3

cpe:2.3:a:nagios:nagios_xi:5.7.3
Nagios » Nagios Xi » Version: 5.7.4

cpe:2.3:a:nagios:nagios_xi:5.7.4
Nagios » Nagios Xi » Version: 5.7.5

cpe:2.3:a:nagios:nagios_xi:5.7.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25298

Products

Pricing

Contact Us