CVE-2025-56432
BaseFortify
Publication date: 2025-08-26
Last updated on: 2025-09-09
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nagios | nagios_xi | 2024 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a cross-site scripting (XSS) flaw in Nagios XI 2024R2, specifically in the Graph Explorer feature. It allows remote attackers to execute arbitrary JavaScript code within the context of a logged-in user's session by using a specially crafted URL. This happens because the web component responsible for rendering performance-related data does not properly sanitize input parameters, enabling attackers to inject malicious scripts. [1]
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to hijack user sessions, execute unauthorized actions within the Nagios XI interface, or compromise sensitive information accessible during the user's session. Since the attack executes in the context of a logged-in user, it can lead to unauthorized access or manipulation of monitoring data and system controls. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for attempts to access the Nagios XI Graph Explorer feature with specially crafted URLs containing suspicious JavaScript code or unusual input parameters. Since it involves XSS via URL parameters, inspecting web server logs for such patterns or using web application security scanners that test for XSS in URL parameters targeting the Graph Explorer component can help detect exploitation attempts. Specific commands are not provided in the resources. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to update Nagios XI to version 2024R2.1 or later, which includes a fix that sanitizes parameters in the Graph Explorer component to prevent XSS attacks. Applying this update will address the vulnerability and enhance overall system security. [1]