Nagvis

9 CVEs across 1 Nagvis products. Browse Nagvis vulnerabilities, severities, and proof-of-concept exploits.

Nagvis products with known CVEs

ProductCVEs
Nagvis9
Nagvis CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-39665Medium5.32025-12-03User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
CVE-2024-47090Medium6.12025-05-27Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS
CVE-2024-38866High7.52025-05-27Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
CVE-2024-47093High8.82024-12-19Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS
CVE-2023-46287Medium6.12023-10-20XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
CVE-2022-46945Critical9.12023-05-26Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.
CVE-2022-3979Medium5.62022-11-13A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/c…
CVE-2021-33178Medium6.52021-10-14The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of thi…
CVE-2017-6393Medium6.12017-03-02An issue was discovered in NagVis 1.9b12. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "nagvis-master/share/user…