CNNVD-202512-4932 Information

CNNVD ID

CNNVD-202512-4932

CVE-2025-67255

  • CNNVD Published: 2025-12-29

Description (Chinese)

Nagios XI是美国Nagios公司的一套IT基础设施监控解决方案。该方案支持对应用、服务、操作系统等进行监控和预警。 Nagios XI 2026R1.0.1版本存在安全漏洞,该漏洞源于仪表板参数过滤不当,可能导致SQL注入攻击。

Description (English)

Nagios XI is an IT infrastructure monitoring solution for the United States company Nagios. The programme supports monitoring and early warning of applications, services, operating systems, etc. There is a security loophole in the Nagyos XI 2026R1.0.1 version, which stems from the inappropriate filtering of dashboard parameters, which could lead to an attack by SQL.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Nagios

Published

2025-12-29

Last Modified

2026-02-24

References

https://github.com/YongYe-Security/NagiosXI/tree/main https://www.nagios.org/

Share on: