A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54960 | Third Party Advisory |
Configurations
History
07 Jul 2025, 17:46
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nagios
Nagios nagios Xi |
|
| CPE | cpe:2.3:a:nagios:nagios_xi:2024:r1.2.2:*:*:*:*:*:* | |
| References | () https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54960 - Third Party Advisory |
20 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-20 18:15
Updated : 2025-07-07 17:46
NVD link : CVE-2024-54960
Mitre link : CVE-2024-54960
JSON object : View
Products Affected
nagios
- nagios_xi
CWE
No CWE.