Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-34283

Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value.

Published

2025-10-30T22:15:48.633

Last Modified

2025-11-06T18:14:36.920

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-497
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nagios nagios_xi < 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
Application nagios nagios_xi 2024 Yes
References