Nagios

Records303All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high102CVSS 7.0–8.9

Exploited now

Nagios records in CISA KEV

Products in the NVD configurations · select one to filter the records

3 records in Incident Manager · all components

TI-2019-06660 CVE-2019-9203 · GHSA-5ffq-45w7-8pq6

MEDIUM 61

Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20368 Published 2019-03-28 No fix listed

TI-2019-06661 CVE-2019-9204 · GHSA-8jqf-v326-vr98

MEDIUM 60

SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19685 Published 2019-03-28 No fix listed CWE-89

TI-2019-06659 CVE-2019-9202 · GHSA-6977-jm4x-ff2g

MEDIUM 59

Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.2377 Published 2019-03-28 No fix listed