CNNVD-202510-4114 Information

CNNVD ID

CNNVD-202510-4114

CVE-2023-7319

  • CNNVD Published: 2025-10-30

Description (Chinese)

Nagios Network Analyzer是Nagios公司的一款用于监控和分析网络流量的企业级解决方案。 Nagios Network Analyzer 2024R1之前版本存在安全漏洞,该漏洞源于Percentile Calculator菜单对用户输入验证不足,可能导致跨站脚本攻击。

Description (English)

Nagios Network Analyzer is an enterprise-level solution by Nagios to monitor and analyse network traffic. There was a security loophole in the pre-Nagios Network Analyzer 2024R1 version, which stemmed from the insufficient user input validation of the Percentile Calculator menu, which could lead to a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Nagios

Published

2025-10-30

Last Modified

2026-02-24

References

https://www.nagios.com/changelog/nagios-fusion/ https://www.vulncheck.com/advisories/nagios-network-analyzer-xss-via-percentile-calculator-menu

Patch

https://www.nagios.com/products/security/#network-analyzer

Share on: