📦

log_server

Vendor: nagios

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 4 Code Available
Total RCEs 2 Remote Access
Total CVEs 42 Total Indexed
Avg. EPSS 6.80% Exploit Prob.
Latest CVE CVE-2025-34323 Nov 17

Security Vulnerability Index

Page 3 / 5
5.4 CVSS
CVE-2021-35478

Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.

EPSS: 76.62%
6.1 CVSS
CVE-2020-25385

Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapshot_name parameter, which may impact users who open a maliciously crafted link or third-party web page.

EPSS: 16.20%
5.4 CVSS
CVE-2020-16157

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

EPSS: 14.41%
6.1 CVSS
CVE-2019-15898

Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.

EPSS: 1.60%