Security Advisory

CVE-2024-14000

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-30 21:51:02
Last updated 2025-11-17 18:21:48
Assigner VulnCheck
State PUBLISHED

Description

Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victims browser.