Cross-Site Scripting Vulnerability in Nagios XI by Nagios Enterprises
CVE-2021-47698

5.1MEDIUM

Key Information:

Vendor

NagiOS

Status
Xi
Vendor
CVE Published:
3 November 2025

What is CVE-2021-47698?

Nagios XI versions before 5.8.7 are susceptible to cross-site scripting (XSS) due to inadequate validation of user inputs in the Core UI’s Views URL handling. This vulnerability could allow attackers to inject malicious scripts that execute in the browser of unsuspecting users, potentially leading to unauthorized access or data leakage.

Affected Version(s)

XI 0 < 5.8.7

References

https://www.nagios.com/changelog/nagios-xi/
release-notespatch
https://www.vulncheck.com/advisories/nagios-xi-xss-in-cor...
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2021-47698 : Cross-Site Scripting Vulnerability in Nagios XI by Nagios Enterprises