MEDIUM
Nagios XI < 5.11.3 XSS via Graph Explorer
Published Oct 30, 2025
5.1
MEDIUMCVSS 4.0
EPSS 0.51%
Description
Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Affected products
-
- Version 0StatusaffectedConstraints<5.11.3
- Version
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Nagios addresses this vulnerability as "The Graph Explorer component is vulnerable to a cross-site scripting attack" and "Fixed an XSS vulnerability in the Graph Explorer component."
Weaknesses (1)
References (3)
- https://www.nagios.com/changelog/nagios-xi/ release-notespatchRelease Notes
- https://www.nagios.com/products/security/#nagios-xi vendor-advisorypatchRelease Notes
- https://www.vulncheck.com/advisories/nagios-xi-xss-via-graph-explorer third-party-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.nagios.com/changelog/nagios-xi/ | release-notespatchRelease Notes | |
| https://www.nagios.com/products/security/#nagios-xi | vendor-advisorypatchRelease Notes | |
| https://www.vulncheck.com/advisories/nagios-xi-xss-via-graph-explorer | third-party-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Oct 30, 2025
Updated Nov 17, 2025
Reserved Oct 21, 2025
Link CVE-2023-7315
CISA Vulnrichment
Updated Oct 31, 2025