CVE-2023-53688: nagios xi before 5.11.3 (exclusive); +1 more affected products

CVE-2023-53688. CVSS 3.1 base score 5.4 (MEDIUM, NVD). EPSS 0.00317 (percentile 0.23079), scored 16-Oct-2026.

Affected technology

nagios xi · before 5.11.3 (exclusive)
nagios

XI · 0 to before 5.11.3
Nagios

Description’s affected range: versions prior to 5.11.3

Component: Hypermap Replay component

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Active user interaction

What an attacker can do

An attacker can submit crafted input that is not properly validated or escaped, allowing injection of malicious script that executes in the context of a victim's browser (XSS). Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality and availability impact as none; integrity impact as low.

Published 18-Oct-2026 00:28 UTC

CWE: CWE-79, CWE-352
CCR priority: 21.7 /100 (P4)
CVSS 3.1: 5.4 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · NVD
EPSS: 0.00317 · percentile 0.23079 · 2026-10-16
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 00:27:35.898420+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-53688.html