CVE-2021-37350

—

CVSS 3.1

9.8 critical

EPSS

79%p100

Published

Aug 13, 2021 (Aug 13, 2021)

Modified

Jun 17, 2026

Description

Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.

Vendors: nagios
Products: nagios xi
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (79.3%)

In the news2 stories

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

The Hacker NewsSep 27, 04:39 UTC · Sep 27, 2021Exploit / PoC CVE-2021-37344 CVE-2021-37346 CVE-2021-37350+8 CVEs1

60

Flaws in Nagios Network Management systems pose risk to companies

Security AffairsSep 22, 15:08 UTC · Sep 22, 2021Exploit / PoC CVE-2021-37353 CVE-2021-37352 CVE-2021-37351+8 CVEs

60