What’s Vulnerable › Vulnerabilities

CVE-2021-28924

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-08 · updated 2026-06-17
• Weakness: CWE-79

Description

Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.

Affected products

• Nagios Network Analyzer: before 2.4.3 — fixed in 2.4.3

How to fix

Upgrade to a fixed version: Nagios Network Analyzer 2.4.3. Check the vendor advisory for mitigations.

References

• https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25
• https://www.nagios.com/downloads/nagios-network-analyzer/change-log/
• https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25
• https://www.nagios.com/downloads/nagios-network-analyzer/change-log/

Get alerted when CVE-2021-28924 or the next vulnerability affects your stack