Advisories · Technology
Nagios Log Server.
Every CVE that names Nagios Log Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules
- Nagios Log Server
- Broken access control
- CVSS 8.6 High
Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries
- Nagios Log Server
- Command injection
- CVSS 5.1 Medium
Nagios Log Server < 2.1.14 XSS via Snapshots Page
- Nagios Log Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Nagios Log Server < 2024R1 XSS via Create User Function
- Nagios Log Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages
- Nagios Log Server
- Cross-site scripting (XSS)
- CVSS 8.7 High
Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation
- Nagios Log Server
- CWE-281
- CVSS 9.4 CriticalCritical · CVSS 9+
Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID
- Nagios Log Server
- Code injection
- CVSS 5.3 Medium
Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback
- Nagios Log Server
- Information disclosure
- CVSS 7.1 High
Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion
- Nagios Log Server
- Broken access control
- CVSS 8.5 High
Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root
- Nagios Log Server
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+
Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges
- Nagios Log Server
- Privilege escalation
- CVSS 8.7 High
Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access
- Nagios Log Server
- Broken access control
- CVSS 5.1 Medium
Nagios Log Server < 1.4.2 Dashboards Logs Table XSS
- Nagios Log Server
- Cross-site scripting (XSS)
- CVSS 8.7 High
Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext
- Nagios Log Server
- Weak cryptography or TLS
- CVSS 6.9 Medium
Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated
- Nagios Log Server
- Information disclosure
- Hard-coded credentials
- CVSS 8.5 High
Incorrect authorization in Nagios Log Server
- Nagios Log Server
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Nagios Log Server: Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext…
- Nagios Log Server
- Information disclosure