CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–4 of 4 records

CVE Vendor Product Added Due Status
CVE-2021-25296 — Nagios XI OS Command Injection
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
 Nagios Nagios XI Jan 18, 2022 Feb 1, 2022
CVE-2021-25297 — Nagios XI OS Command Injection
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
 Nagios Nagios XI Jan 18, 2022 Feb 1, 2022
CVE-2021-25298 — Nagios XI OS Command Injection
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
 Nagios Nagios XI Jan 18, 2022 Feb 1, 2022
CVE-2019-15949 — Nagios XI Remote Code Execution Vulnerability
Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.
 Nagios Nagios XI Nov 3, 2021 May 3, 2022