CVE-2021-37350

Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation

published August 13, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
79%
Percentile
99.6
In the wild
Unconfirmed
What it is

⚠️ Watch out, Nagios XI users! The Bulk Modifications Tool has a sneaky SQL injection vulnerability that could let attackers run wild with your database! 🔥 Imagine a restaurant that accepts any order without verifying what’s actually on the menu — a recipe for chaos! That’s what happens when input sanitization goes wrong in the Bulk Modifications Tool. An attacker could send malicious SQL commands that may compromise your database, leading to unauthorized data access or even data manipulation. This could be incredibly damaging, as sensitive information might be at risk!

Put simply

Imagine a restaurant that accepts any order without verifying what’s actually on the menu — a recipe for chaos! That’s what happens when input sanitization goes wrong in the Bulk Modifications Tool. This vulnerability arises from improper input sanitization in the Bulk Modifications Tool of Nagios XI, allowing attackers to inject harmful SQL queries into the system.

What to do

An attacker could send malicious SQL commands that may compromise your database, leading to unauthorized data access or even data manipulation. This could be incredibly damaging, as sensitive information might be at risk! To ensure your systems are secure, upgrade Nagios XI to version 5.8.5 or later immediately. Additionally, review and validate all user inputs to prevent SQL injection vulnerabilities. Don't let rogue SQL ruin your day! You’ve got this! Secure your Nagios environment and become a security hero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.79250 · 99.6th percentile
Published
2021-08-13T11:30Z
EPSS history
Timeline
  • 13 AUG 11:30Z
    Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation
    cvelistv5