[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-25297":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":29,"technologies":54,"references":56,"score":64,"epss_score":65,"epss_percentile":66,"is_kev":25,"cisa_kev_date_added":67,"cisa_kev_due_date":68,"cisa_ssvc":69,"attack_mappings":79,"exploits":86},292030,"CVE-2021-25297","EUVD-2021-12197","Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file \u002Fusr\u002Flocal\u002Fnagiosxi\u002Fhtml\u002Fincludes\u002Fconfigwizards\u002Fswitch\u002Fswitch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.","2021-02-15T13:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",9,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":24,"attackComplexity":17,"availabilityImpact":22,"privilegesRequired":17,"confidentialityImpact":22},"UNCHANGED","3.1",8.8,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE",true,[27,28],"CWE-78","NVD-CWE-Other",[30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53],"cpe:2.3:a:nagios:nagios_xi:5.7.3:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.5:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.7.4:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.7.2:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.5.7:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.11:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.4:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.5.10:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.5.8:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.3:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.7.5:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.5.9:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.9:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.5.11:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.7:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.7.1:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.8:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.1:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.7.0:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.6:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.6.2:*:*:*:*:*:*:*","cpe:2.3:a:nagios:nagios_xi:5.5.6:*:*:*:*:*:*:*",[55],"Nagios Nagios Xi",[57,58,59,60,61,62,63],"http:\u002F\u002Fnagios.com","http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F161561\u002FNagios-XI-5.7.5-Remote-Code-Execution.html","http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F170924\u002FNagios-XI-5.7.5-Remote-Code-Execution.html","https:\u002F\u002Fassets.nagios.com\u002Fdownloads\u002Fnagiosxi\u002Fversions.php","https:\u002F\u002Fgithub.com\u002Ffs0c-sh\u002Fnagios-xi-5.7.5-bugs\u002Fblob\u002Fmain\u002FREADME.md","https:\u002F\u002Fwww.fastly.com\u002Fblog\u002Fanatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and","https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25297",0.92,0.56659,0.99055,"2022-01-18T00:00:00Z","2022-02-01T00:00:00Z",{"timestamp":70,"automatable":71,"tech_impact":72,"exploitation":73,"cisa_decision":74,"cisa_remediation_timeline":78},"2025-02-04T19:46:39.479223Z","no","total","active",{"vector":75,"decision":76,"priority":77},"CISAv1\u002FE:A\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T21:43:03.719182\u002F","act","immediate","3DF",[80],{"name":81,"source":82,"tactics":83,"technique_id":85},"Exploit Public-Facing Application","attack_vector",[84],"initial-access","T1190",[87,88,89,90,91,92],{"link":59},{"link":61},{"link":58},{"link":62},{"link":60},{"link":93},"https:\u002F\u002Fgithub.com\u002Fprojectdiscovery\u002Fnuclei-templates\u002Fblob\u002Fmain\u002Fhttp\u002Fcves\u002F2021\u002FCVE-2021-25297.yaml"]