MEDIUM
Nagios XI < 5.8.0 XSS via Views URL Handling
Published Oct 30, 2025
5.1
MEDIUMCVSS 4.0
EPSS 0.45%
Description
Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via the Views feature URL handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Affected products
-
Affected
- ≥ 0, < 5.8.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Nagios addresses this vulnerability as "Fixed XSS security vulnerability in views url."
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34701 Advisory
- https://www.nagios.com/changelog/nagios-xi/ release-notespatchRelease Notes
- https://www.vulncheck.com/advisories/nagios-xi-xss-via-views-url-handling third-party-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34701 | Advisory | |
| https://www.nagios.com/changelog/nagios-xi/ | release-notespatchRelease Notes | |
| https://www.vulncheck.com/advisories/nagios-xi-xss-via-views-url-handling | third-party-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Oct 30, 2025
Updated Nov 17, 2025
Reserved Oct 30, 2025
Link CVE-2021-47697
CISA Vulnrichment
Updated Oct 31, 2025
Red Hat
No data
GitHub
No data