nagios nagios xi
Published Atomicorp research notes for CVEs affecting nagios nagios xi where WAF protections were observed during testing or engineering review.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
| CVE | Vulnerability | CVSS | Severity | Rules Observed |
|---|---|---|---|---|
| CVE-2018-15708 | Nagios XI Magpie_debug.php Root Remote Code Execution | 9.8 (v3.0) | Critical | 340128 , 344370 , 360152 , 380018 , 390720 , 390801 , 390904 |
| CVE-2018-8733 | Nagios XI Chained Remote Code Execution | 9.8 (v3.0) | Critical | 314144 , 331028 , 334168 , 340016 , 340017 , 340145 , 340156 , 340157 , 341145 , 341245 , 344361 , 344363 , 344364 , 344370 , 360147 , 360148 , 380026 , 390700 , 390703 |
| CVE-2018-8734 | Nagios XI Chained Remote Code Execution | 9.8 (v3.0) | Critical | 314144 , 331028 , 334168 , 340016 , 340017 , 340145 , 340156 , 340157 , 341145 , 341245 , 344361 , 344363 , 344364 , 344370 , 360147 , 360148 , 380026 , 390700 , 390703 |
| CVE-2023-48084 | Nagios XI < 5.11.3 - SQL Injection | 9.8 (v3.1) | Critical | 340130 , 340145 , 340156 , 380026 , 380122 |
| CVE-2020-36856 | Nagios XI < 5.6.14 Authenticated RCE command_test.php via address | 9.4 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2018-8735 | Nagios XI Chained Remote Code Execution | 8.8 (v3.0) | High | 314144 , 331028 , 334168 , 340016 , 340017 , 340145 , 340156 , 340157 , 341145 , 341245 , 344361 , 344363 , 344364 , 344370 , 360147 , 360148 , 380026 , 390700 , 390703 |
| CVE-2018-8736 | Nagios XI Chained Remote Code Execution | 8.8 (v3.0) | High | 314144 , 331028 , 334168 , 340016 , 340017 , 340145 , 340156 , 340157 , 341145 , 341245 , 344361 , 344363 , 344364 , 344370 , 360147 , 360148 , 380026 , 390700 , 390703 |
| CVE-2019-15949 | Nagios XI Prior to 5.6.6 getprofile.sh Authenticated Remote Command Execution | 8.8 (v3.1) | High | 330791 , 334168 , 340152 |
| CVE-2021-37343 | Nagios XI Autodiscovery Webshell Upload | 8.8 (v3.1) | High | 340007 , 340095 , 340128 , 344360 , 347009 , 360152 , 380018 , 380026 , 390709 |
| CVE-2018-15710 | Nagios XI Magpie_debug.php Root Remote Code Execution | 7.8 (v3.0) | High | 340128 , 344370 , 360152 , 380018 , 390720 , 390801 , 390904 |
| CVE-2018-10735 | NagiosXI <= 5.4.12 commandline.php SQL injection | 7.2 (v3.0) | High | 340016 , 340017 , 340157 , 340159 , 341245 , 360147 , 360148 |
| CVE-2018-10736 | NagiosXI <= 5.4.12 - SQL injection | 7.2 (v3.0) | High | 340016 , 340017 , 340157 , 340159 , 341245 , 360147 , 360148 |
| CVE-2018-10737 | NagiosXI <= 5.4.12 logbook.php SQL injection | 7.2 (v3.0) | High | 331028 , 340155 , 341155 , 341245 |
| CVE-2018-10738 | NagiosXI <= 5.4.12 menuaccess.php - SQL injection | 7.2 (v3.0) | High | 331028 , 340016 , 340155 , 340157 , 340159 , 341155 , 341245 , 360147 , 360148 , 380026 |
| CVE-2020-35578 | Nagios XI Prior to 5.8.0 - Plugins Filename Authenticated Remote Code Exection | 7.2 (v3.1) | High | 330791 , 334168 , 340152 , 390700 |
| CVE-2020-5792 | Nagios XI 5.5.0-5.7.3 - Snmptrap Authenticated Remote Code Exection | 7.2 (v3.1) | High | 340128 , 344370 , 360152 , 380018 , 380020 , 390801 , 390810 |
| CVE-2011-10037 | Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks | 5.1 (v4.0) | Medium | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 360030 |
| CVE-2024-13992 | Nagios XI < 2024R1.1 XSS via Missing Page / 404 | 5.1 (v4.0) | Medium | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |