Nagios XI

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-14	CVE-2018-15712	Cross-site Scripting vulnerability in Nagios XI 5.5.6 Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php. network low complexity nagios CWE-79	6.1
2018-11-14	CVE-2018-15711	OS Command Injection vulnerability in Nagios XI 5.5.6 Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. network low complexity nagios CWE-78	8.8
2018-11-14	CVE-2018-15710	OS Command Injection vulnerability in Nagios XI 5.5.6 Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php. local low complexity nagios CWE-78	7.8
2018-11-14	CVE-2018-15709	OS Command Injection vulnerability in Nagios XI 5.5.6 Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request. network low complexity nagios CWE-78	8.8
2018-11-14	CVE-2018-15708	Unspecified vulnerability in Nagios XI 5.5.6 Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. network low complexity nagios critical	9.8
2018-05-16	CVE-2018-10738	SQL Injection vulnerability in Nagios XI A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter. network low complexity nagios CWE-89	7.2
2018-05-16	CVE-2018-10737	SQL Injection vulnerability in Nagios XI A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter. network low complexity nagios CWE-89	7.2
2018-05-16	CVE-2018-10736	SQL Injection vulnerability in Nagios XI A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter. network low complexity nagios CWE-89	7.2
2018-05-16	CVE-2018-10735	SQL Injection vulnerability in Nagios XI A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter. network low complexity nagios CWE-89	7.2
2018-04-30	CVE-2018-10554	Cross-site Scripting vulnerability in Nagios XI 5.4.13 An issue was discovered in Nagios XI 5.4.13. network low complexity nagios CWE-79	5.4