CVE-2022-29269: Nagios XI

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that lead to the reformatting/editing of emails from an official email address.

Affected products

• Nagios Nagios XI: up to and including 5.8.5

Published 2022-06-29. Last modified 2026-06-17.