PT-2025-44482 · Nagios Enterprises · Nagios Xi

Published 2025-10-30 · Updated 2025-10-30 · CVE-2022-50585

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to CCM 3.1.7 Nagios XI versions prior to 5.8.9

Description The Core Config Manager (CCM) in Nagios XI is susceptible to a cross-site scripting (XSS) issue through the Audit Log page search input. A lack of proper input validation or escaping could enable an attacker to inject and execute arbitrary scripts within a user's browser.

Recommendations Update Nagios XI to CCM 3.1.7 or later. Update Nagios XI to 5.8.9 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-50585

Affected Products

Nagios Xi

References · 5

• https://osv.dev/vulnerability/CVE-2022-50585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50585 · Security Note
• https://nagios.com/changelog/nagios-xi · Patch
• https://vulncheck.com/advisories/nagios-xi-ccm-xss-via-audit-log-page-search-input · Note
• https://twitter.com/CVEnew/status/1984015886345191732 · Twitter Post