# Nagios XI 5.7.5

Released November 12, 2020. Canonical HTML: https://www.nagios.com/changelog/nagios-xi/5-7-5/

## Security

- Fixed security issues with AngularJS 1.3.9 by upgrading to 1.8.2 -JO
- Fixed various XSS security issues with older version of Bootstrap 3.3.x by upgrading to 3.4.1 in both Desktop and Mobile -JO
- Fixed various XSS security vulnerabilities in Manage Users, Notification Settings, Agent Management, and Deploy Dashboard pages (thanks Namratha) -JO
- (CVE-2020-27988, CVE-2020-27989, CVE-2020-27990, CVE-2020-27991)
- Fixed privilege escalation security vulnerability with Auto-Discovery php script (thanks Chris Lyne of Tenable) (CVE-2020-28648) -JO
- Fixed authenticated remote code execution in Auto-Discovery component (thanks Shahar Zini and Samir Ghanem from Skylight Cyber Security) -JO

## Fixed

- Fixed mobile redirect when trying to access the rapid response URL [TPS#15372] -JO

## Component updates

### Core Config Manager (CCM) 3.0.8

- Fixed various XSS security vulnerabilities in overlay and notification/check period -JO
- Fixed issue with command escaping in Test Check Command [TPS#15167] -JO

Generated 2026-11-14T21:39:32+00:00