Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2024-38866Nagvis · Improper Neutralization of Delimiters Medium5.3EPSS 0.4%2025-05-27CVE Database V5CVE-2024-38866 Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection EPSS 0.4%Vulnerability CWE-140	CVE Database V5	2025-05-27
Medium	–	EPSS 0.6%	CVE-2023-46287nagvis MediumEPSS 0.6%2023-10-20CVE Database V5CVE-2023-46287 An XSS vulnerability exists in NagVis versions prior to 1.9.38 in the select function located in share/server/core/functions/html.php. This vulnerability allows injection of malicious scripts via the affected function. The issue was fixed in version 1.9.38. EPSS 0.6%Vulnerability	CVE Database V5	2023-10-20

Page 1 of 1