{"schema_version":1,"title":"Nagios Fusion vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Nagios Fusion: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2023-7312, was published on 30 October 2025.","url":"https://junglewise.ai/threats/technologies/nagios-fusion","json_url":"https://junglewise.ai/threats/technologies/nagios-fusion.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/nagios-fusion","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2023-7312","cvss":4.8,"epss":0.01,"slug":"cve-2023-7312-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site","title":"Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:42.93+00:00","url":"https://junglewise.ai/threats/cve-2023-7312-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site"},{"cve":"CVE-2023-53690","cvss":4.8,"epss":0.0082,"slug":"cve-2023-53690-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site","title":"Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:42.78+00:00","url":"https://junglewise.ai/threats/cve-2023-53690-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site"},{"cve":"CVE-2023-53689","cvss":4.8,"epss":0.0089,"slug":"cve-2023-53689-nagios-fusion-versions-prior-to-4-2-0-contain-a-reflected-cross","title":"Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:42.633+00:00","url":"https://junglewise.ai/threats/cve-2023-53689-nagios-fusion-versions-prior-to-4-2-0-contain-a-reflected-cross"},{"cve":"CVE-2018-25119","cvss":6.1,"epss":0.0052,"slug":"cve-2018-25119-nagios-fusion-versions-prior-to-4-1-5-are-vulnerable-to-cross","title":"Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the \"fusionwindow\" parameter…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:37.55+00:00","url":"https://junglewise.ai/threats/cve-2018-25119-nagios-fusion-versions-prior-to-4-1-5-are-vulnerable-to-cross"},{"cve":"CVE-2017-20209","cvss":6.1,"epss":0.0052,"slug":"cve-2017-20209-nagios-fusion-versions-prior-to-4-0-1-are-vulnerable-to-cross","title":"Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:37.393+00:00","url":"https://junglewise.ai/threats/cve-2017-20209-nagios-fusion-versions-prior-to-4-0-1-are-vulnerable-to-cross"},{"cve":"CVE-2025-60424","cvss":7.6,"epss":0.0072,"slug":"cve-2025-60424-a-lack-of-rate-limiting-in-the-otp-verification-component-of","title":"A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to…","severity":"high","exploited":false,"published_at":"2025-10-27T16:15:41.753+00:00","url":"https://junglewise.ai/threats/cve-2025-60424-a-lack-of-rate-limiting-in-the-otp-verification-component-of"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Nagios XI","slug":"xi","vulnerabilities":50,"url":"https://junglewise.ai/threats/technologies/xi"},{"name":"Nagios Log Server","slug":"nagios-log-server","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/nagios-log-server"}],"technology":{"hub":true,"name":"Nagios Fusion","slug":"nagios-fusion","vendor":{"hub":true,"name":"Nagios","slug":"nagios","url":"https://junglewise.ai/threats/vendors/nagios"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/nagios-fusion"},"most_severe":[{"cve":"CVE-2025-60424","cvss":7.6,"epss":0.0072,"slug":"cve-2025-60424-a-lack-of-rate-limiting-in-the-otp-verification-component-of","title":"A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to…","severity":"high","exploited":false,"published_at":"2025-10-27T16:15:41.753+00:00","url":"https://junglewise.ai/threats/cve-2025-60424-a-lack-of-rate-limiting-in-the-otp-verification-component-of"},{"cve":"CVE-2018-25119","cvss":6.1,"epss":0.0052,"slug":"cve-2018-25119-nagios-fusion-versions-prior-to-4-1-5-are-vulnerable-to-cross","title":"Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the \"fusionwindow\" parameter…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:37.55+00:00","url":"https://junglewise.ai/threats/cve-2018-25119-nagios-fusion-versions-prior-to-4-1-5-are-vulnerable-to-cross"},{"cve":"CVE-2017-20209","cvss":6.1,"epss":0.0052,"slug":"cve-2017-20209-nagios-fusion-versions-prior-to-4-0-1-are-vulnerable-to-cross","title":"Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:37.393+00:00","url":"https://junglewise.ai/threats/cve-2017-20209-nagios-fusion-versions-prior-to-4-0-1-are-vulnerable-to-cross"},{"cve":"CVE-2023-7312","cvss":4.8,"epss":0.01,"slug":"cve-2023-7312-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site","title":"Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:42.93+00:00","url":"https://junglewise.ai/threats/cve-2023-7312-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site"},{"cve":"CVE-2023-53689","cvss":4.8,"epss":0.0089,"slug":"cve-2023-53689-nagios-fusion-versions-prior-to-4-2-0-contain-a-reflected-cross","title":"Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:42.633+00:00","url":"https://junglewise.ai/threats/cve-2023-53689-nagios-fusion-versions-prior-to-4-2-0-contain-a-reflected-cross"},{"cve":"CVE-2023-53690","cvss":4.8,"epss":0.0082,"slug":"cve-2023-53690-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site","title":"Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD…","severity":"medium","exploited":false,"published_at":"2025-10-30T22:15:42.78+00:00","url":"https://junglewise.ai/threats/cve-2023-53690-nagios-fusion-versions-prior-to-4-2-0-contain-a-stored-cross-site"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}