Nagios Cross Platform Agent vulnerabilities

2 CVEs affecting Nagios Cross Platform Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-43584, published 2024-01-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-4285, published 2022-12-27. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in Nagios NCPA. This vulnerability affects unknown code of the file agent/listener/templates/tail.html. The manipulation of the argument name leads…
CVE-2021-43584, published 2024-01-24. Medium severity, CVSS 4.8. EPSS: 1.2% chance of exploitation in the next 30 days. DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4.0 allows attackers to run arbitrary code via the name…