CVE-2021-25299

MediumCVSS 6.1

Published: 15/02/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

97.71%

100th percentile - higher than 100% of all known CVEs

Summary

Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS) in /usr/local/nagiosxi/html/admin/sshterm.php due to improper input sanitization. A crafted URL can steal admin session cookies or be chained with other bugs for one-click RCE.

Risk Assessment

Risk includes session hijacking and potential remote code execution on the Nagios XI server, leading to full compromise of the monitoring system.

Recommendation

Immediately update Nagios XI to the latest version and implement input sanitization in sshterm.php. Restrict admin panel access to trusted IP addresses.

Original NVD description (English source)

Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.