Security Advisory

CVE-2025-56432

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-26 00:00:00

Last updated 2026-07-05 01:10:26

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-related data.

← Browse all CVEs View on cve.org ↗