Approved changes feed: RSS · Atom
cpe:2.3:a:nagios:nagios_xi:2011:*:*:*:*:*:*:*
part: a version: 2011 update: *
| Vendor | Nagios (7fb1328e-019e-51f8-8fa9-c12efadd1bbe) |
|---|---|
| Product | Nagios Xi (7baa8382-9566-5d4f-a39b-a6738305acfe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-10040 |
vulnerable | 2026-06-08 04:56:40.621641 |
Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Published: 2025-10-30T21:55:55.168Z
Updated: 2025-11-17T18:21:36.760Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-10039 |
vulnerable | 2026-06-08 04:56:40.621099 |
Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Published: 2025-10-30T21:48:44.152Z
Updated: 2025-11-17T18:21:36.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-10038 |
vulnerable | 2026-06-08 04:56:40.620553 |
Nagios XI < 2011R1.9 XSS via Recurring Downtime Script
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the recurring downtime script of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Published: 2025-10-30T21:55:10.682Z
Updated: 2025-11-17T18:21:36.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-10037 |
vulnerable | 2026-06-08 04:56:40.620002 |
Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of xiwindow variables used to build permalinks in the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Published: 2025-10-30T21:57:27.150Z
Updated: 2025-12-22T17:24:04.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-10036 |
vulnerable | 2026-06-08 04:56:40.619423 |
Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" JavaScript link. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Published: 2025-10-30T21:49:05.959Z
Updated: 2025-11-17T18:21:35.913Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-10035 |
vulnerable | 2026-06-08 04:56:40.613702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.