CVE-2023-7316: Nagios XI < 2024R1 XSS via Graph Explorer
Published Oct 30, 2025
·Updated
Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
Affected Software
2 affected components
Nagios Nagios XI<2024R1
Nagios Nagios XI<2024
Remediation
Information
Nagios addresses this vulnerability as "It was discovered that Nagios XI's graphexplorer component was vulnerable to an XSS vulnerability" and "Fixed an XSS vulnerability in the graphexplorer component."
Event History
Oct 30, 2025
CVE Published
via MITRE·09:52 PM
Data Sourced
via MITRE·09:52 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-7316?
CVE-2023-7316 has a high severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2023-7316?
To fix CVE-2023-7316, upgrade Nagios XI to version 2024R1 or later.
3
What components are affected by CVE-2023-7316?
CVE-2023-7316 specifically affects the Graph Explorer component in Nagios XI.
4
What can an attacker do with CVE-2023-7316?
An attacker can inject and execute arbitrary scripts in the context of a victim's browser due to CVE-2023-7316.
5
What versions of Nagios XI are vulnerable to CVE-2023-7316?
Nagios XI versions prior to 2024R1 are vulnerable to CVE-2023-7316.