CVE-2021-37350

CRITICAL

Nagios XI < 5.8.5 - SQL Injection via Bulk Modifications Tool

Title source: llm

Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.

Core 1

Core References

Release Notes, Vendor Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.4096

EPSS Percentile 97.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (1)

nagios/nagios_xi < 5.8.5

Published Aug 13, 2021

Tracked Since Feb 18, 2026