CVE-2021-33177CWE-89

The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection

published October 14, 2021

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the malicious actor to be authenticated to the vulnerable system, but once authenticated they would be able to execute arbitrary sql queries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10132 · 95.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-10-14T14:55Z
EPSS history
Timeline
  • 14 OCT 14:55Z
    The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection
    cvelistv5