# Nagios Nagios Xi


- [CVE-2021-25296](https://insights.sbomify.com/CVE-2021-25296/): Nagios XI OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-25297](https://insights.sbomify.com/CVE-2021-25297/): Nagios XI OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-25298](https://insights.sbomify.com/CVE-2021-25298/): Nagios XI OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2019-15949](https://insights.sbomify.com/CVE-2019-15949/): Nagios XI Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2024-24401](https://insights.sbomify.com/CVE-2024-24401/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24402](https://insights.sbomify.com/CVE-2024-24402/): Privilege escalation in n/a (critical 9.8)
- [CVE-2023-48084](https://insights.sbomify.com/CVE-2023-48084/): SQL injection in n/a (critical 9.8)
- [CVE-2023-48085](https://insights.sbomify.com/CVE-2023-48085/): Code injection in n/a (critical 9.8)
- [CVE-2022-38250](https://insights.sbomify.com/CVE-2022-38250/): SQL injection in n/a (critical 9.8)
- [CVE-2021-36363](https://insights.sbomify.com/CVE-2021-36363/): Missing authorization in n/a (critical 9.8)
- [CVE-2021-36364](https://insights.sbomify.com/CVE-2021-36364/): Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards. (critical 9.8)
- [CVE-2021-36365](https://insights.sbomify.com/CVE-2021-36365/): Privilege escalation in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/nagios/nagios-xi/