VYPR
← All advisories
High severity7.2NVD Advisory· Published Oct 30, 2025· Updated Jun 17, 2026

CVE-2020-36869

CVE-2020-36869

Description

Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not properly sanitized, allowing SQL injection that may lead to unauthorized disclosure or modification of application data or execution of arbitrary SQL commands against the backend database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Nagios/XIv5
    Range: 0
  • Nagios/XIllm-fuzzy2 versions
    <5.7.5+ 1 more
    • (no CPE)range: <5.7.5
    • cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*range: <5.7.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.