CVE-2021-47692

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. It has been identified as a duplicate of  https://www.cve.org/CVERecord?id=CVE-2021-33179 .
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

31 Oct 2025, 14:16

Type Values Removed Values Added
References
  • {'url': 'https://www.nagios.com/changelog/nagios-xi/', 'source': 'disclosure@vulncheck.com'}
  • {'url': 'https://www.vulncheck.com/advisories/nagios-xi-ccm-xss-via-lock-page-functionality', 'source': 'disclosure@vulncheck.com'}
CWE CWE-79
Summary (en) The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.2 / Nagios XI 5.8.4 contains a cross-site scripting (XSS) vulnerability via the lock page functionality. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. It has been identified as a duplicate of  https://www.cve.org/CVERecord?id=CVE-2021-33179 .

30 Oct 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-30 22:15

Updated : 2025-10-31 14:16


NVD link : CVE-2021-47692

Mitre link : CVE-2021-47692

CVE.ORG link : CVE-2021-47692


JSON object : View

Products Affected

No product.

CWE

No CWE.