Security Advisory

CVE-2012-10029

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-05 20:03:35
Last updated 2026-05-15 11:13:56
Assigner VulnCheck
CVSS score 8.6
State PUBLISHED

Description

Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in `visApi.php`. An authenticated user can inject system commands via unsanitized parameters such as `host`, resulting in remote code execution.