PT-2025-44519 · Nagios · Nagios Network Analyzer

Tisha Manandhar · Publicado 2025-10-30 · Atualizado 2025-10-31 · CVE-2025-34278

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nagios Network Analyzer versions prior to 2024R1

Description The software contains a stored cross-site scripting (XSS) issue within the Source Groups page, specifically in the percentile calculator menu. An attacker can inject a malicious payload that is stored by the application and executed when other users view the affected page, running the script within the victim’s browser.

Recommendations Update to version 2024R1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-15973

CVE-2025-34278

Produtos afetados

Nagios Network Analyzer

Referências · 10

• https://nagios.com/changelog/#network-analyzer · Correção
• https://vulncheck.com/advisories/nagios-network-analyzer-source-groups-percentile-calculator-menu-stored-xss · Nota
• https://twitter.com/CVEnew/status/1984012709088604257 · Publicação no Twitter
• https://t.me/CVEtracker/36241 · Publicação no Telegram
• https://nagios.com/products/security/#network-analyzer · Correção, Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-34278 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-34278 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1984078329738088637 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-15973 · Nota de Segurança
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44519 · Nota