PT-2025-44528 · Nagios Enterprises · Nagios Xi
CVE-2011-10037
·
Published
2025-10-30
·
Updated
2025-10-30
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Nagios XI versions prior to 2011R1.9
Description
Nagios XI versions prior to 2011R1.9 are susceptible to cross-site scripting (XSS) due to inadequate validation or escaping of user-supplied input when handling
xiwindow variables. This can allow an attacker to inject and execute arbitrary script within a victim’s browser when building permalinks in the web interface.Recommendations
Update Nagios XI to version 2011R1.9 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Nagios Xi