PT-2025-44519 · Nagios · Nagios Network Analyzer

Tisha Manandhar · Published 2025-10-30 · Updated 2025-10-31 · CVE-2025-34278

Positive Technologies · (AI Summary)

CVSS v2.0

6.5

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nagios Network Analyzer versions prior to 2024R1

Description The software contains a stored cross-site scripting (XSS) issue within the Source Groups page, specifically in the percentile calculator menu. An attacker can inject a malicious payload that is stored by the application and executed when other users view the affected page, running the script within the victim’s browser.

Recommendations Update to version 2024R1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-15973

CVE-2025-34278

Affected Products

Nagios Network Analyzer

References · 9

• https://nagios.com/changelog/#network-analyzer · Patch
• https://bdu.fstec.ru/vul/2025-15973 · Security Note
• https://nagios.com/products/security/#network-analyzer · Patch, Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34278 · Security Note
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44519 · Note
• https://t.me/CVEtracker/36241 · Telegram Post
• https://twitter.com/CVEnew/status/1984012709088604257 · Twitter Post
• https://vulncheck.com/advisories/nagios-network-analyzer-source-groups-percentile-calculator-menu-stored-xss · Note
• https://twitter.com/VulmonFeeds/status/1984078329738088637 · Twitter Post