Medium severity6.5NVD Advisory· Published Jun 29, 2022· Updated Jun 17, 2026

CVE-2022-29269

Description

In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that lead to the reformatting/editing of emails from an official email address.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nagios/XI2 versions
cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*range: <=5.8.5
- (no CPE)range: <=5.8.5
Nagios/XIdescription

Patches

Vulnerability mechanics

References

assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXTnvdRelease NotesVendor Advisory
github.com/sT0wn-nl/CVEs/blob/master/README.mdnvdThird Party Advisory
www.nagios.com/downloads/nagios-xi/change-log/nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000