Nagios fusion
This hub aggregates every CVE we track for Nagios fusion, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
7
CVEs tracked
3
Critical
0
High
0
In CISA KEV
Severity distribution
MEDIUM4CRITICAL3
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
3
0
0
0
0
0
0
0
0
0
0
2024-092026-08
Latest CVEs
The 7 most recently published vulnerabilities affecting Nagios fusion.
- CVE-2023-53689Nagios Fusion < 4.2.0 License Information Reflected XSS4.8
- CVE-2023-53690Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS4.8
- CVE-2023-7312Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail4.8
- CVE-2020-28911Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.6.5
- CVE-2020-28904Execution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation as nagios via installation of a malicious component containing PHP code.9.8
- CVE-2020-28902Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmd_subsys.php.9.8
- CVE-2020-28901Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code Execution as root via vectors related to corrupt component installation in cmd_subsys.php.9.8
Product normalization is registry-driven with AI assist and human review. How it works