PT-2025-44474 · Nagios Enterprises · Nagios Xi+1

Published 2025-10-30 · Updated 2025-10-30 · CVE-2021-47690

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to CCM 3.1.1 Nagios XI versions prior to 5.8.2

Description The Core Config Manager (CCM) in Nagios XI is susceptible to multiple cross-site scripting (XSS) issues within Overlay modals. A lack of proper input validation or escaping of user-provided data could enable an attacker to inject and run arbitrary scripts within a user's browser.

Recommendations Update to CCM version 3.1.1 or later. Update to Nagios XI version 5.8.2 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47690

Affected Products

Core Config Manager

Nagios Xi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-47690 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47690 · Vendor Advisory
• https://nagios.com/changelog/nagios-xi · Patch
• https://twitter.com/CVEnew/status/1984015883107266666 · Twitter Post
• https://vulncheck.com/advisories/nagios-xi-ccm-xss-via-overlay-modals · Note