Read the docs

Icinga

Records56All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

Icinga records in CISA KEV

No Icinga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Icinga 31 records HIGH Icinga Web 2 13 records HIGH Icinga Db Web 2 records LOW Icinga Powershell Framework 1 record LOW Icinga Web Jira Integration 1 record LOW Icingaweb2-module-incubator 1 record LOW

Records

31 records in Icinga · all components

TI-2012-05060 CVE-2012-6096 · GHSA-976m-29vc-cxx7

Multiple stack-based buffer overflows in the get_history function in history.cgi in…

Priority HIGH 69

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to exe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.6645 Published 2013-01-22 No fix listed CWE-119
TI-2013-05840 CVE-2013-7108 · GHSA-48qr-xf75-jc6h

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before…

Priority MEDIUM 60

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.61625 Published 2014-01-14 Fix deferred CWE-20
TI-2011-01902 CVE-2011-2179 · GHSA-p3hf-j3h8-8mqv

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1)…

Priority MEDIUM 42

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as dem…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.26037 Published 2011-06-14 No fix listed CWE-79
TI-2021-12407 CVE-2021-32739

Improper privilege management in icinga2

Priority MEDIUM 40

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0114 Published 2021-07-15 No fix listed CWE-267
TI-2017-12427 CVE-2017-16882 · GHSA-rc9c-mrhp-7jg8

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports…

Priority LOW 34

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), w…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00311 Published 2017-11-18 No fix listed CWE-732
TI-2013-05838 CVE-2013-7106 · GHSA-8g54-hg6f-wpv7

Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10…

Priority LOW 34

Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0254 Published 2014-01-14 No fix listed CWE-119
TI-2013-05839 CVE-2013-7107 · GHSA-967x-cpx9-7xr2

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as de…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01006 Published 2014-01-14 No fix listed CWE-352
TI-2017-12469 CVE-2017-16933 · GHSA-v3ww-m662-2527

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename…

Priority LOW 31

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for crea…

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00305 Published 2017-11-24 No fix listed CWE-732
TI-2015-06660 CVE-2015-8010 · GHSA-x57r-7jqf-5w9p

Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and…

Priority LOW 30

Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01486 Published 2017-03-27 No fix listed CWE-79
Load more
Open these records in search →