Vulnerabilities > Nagios > Network Analyzer

DATE CVE VULNERABILITY TITLE RISK
2021-04-08 CVE-2021-28925 SQL Injection vulnerability in Nagios Network Analyzer
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.
network
low complexity
nagios CWE-89
critical
9.8
2021-04-08 CVE-2021-28924 Cross-site Scripting vulnerability in Nagios Network Analyzer
Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.
network
low complexity
nagios CWE-79
6.1