Priority LOW 29
Icinga 2 is an open source monitoring system.
Vulnerabilities
31 records
TI-2025-38259 CVE-2025-61909
Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user
Priority LOW 18
Icinga 2 is an open source monitoring system.
Priority LOW 32
Icinga 2 is an open source monitoring system.
Priority LOW 31
Icinga 2 is an open source monitoring system.
TI-2025-30428 CVE-2025-48057
Icinga 2 certificate renewal might incorrectly renew an invalid certificate
Priority MEDIUM 48
Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.
TI-2024-32957 CVE-2024-49369
Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections
Priority MEDIUM 54
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.
TI-2024-16337 CVE-2024-24820
Icinga Director configuration is susceptible to Cross-Site Request Forgery
Priority HIGH 69
Icinga Director is a tool designed to make Icinga 2 configuration handling easy.
TI-2021-15573 CVE-2021-37698
Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer
Priority LOW 36
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.
TI-2021-12411 CVE-2021-32743
Passwords used to access external services inadvertently exposed through API
Priority MEDIUM 42
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.
TI-2021-12407 CVE-2021-32739
Improper privilege management in icinga2
Priority MEDIUM 40
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.
Priority LOW 32
Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface.
Priority LOW 27
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface.
TI-2020-17821 CVE-2020-29663
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due…
Priority MEDIUM 42
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL.
TI-2020-10970 CVE-2020-14004 · GHSA-xqhq-m8mv-g9wp
An issue was discovered in Icinga2 before v2.12.0-rc1.
Priority LOW 35
An issue was discovered in Icinga2 before v2.12.0-rc1.
TI-2018-04814 CVE-2018-6535 · GHSA-5535-phc2-4862
An issue was discovered in Icinga 2.x through 2.8.1.
Priority LOW 38
An issue was discovered in Icinga 2.x through 2.8.1.
TI-2018-04813 CVE-2018-6534 · GHSA-mpx7-h62m-5fwv
An issue was discovered in Icinga 2.x through 2.8.1.
Priority LOW 31
An issue was discovered in Icinga 2.x through 2.8.1.
TI-2018-04812 CVE-2018-6533 · GHSA-5f3g-f3qg-cgq4
An issue was discovered in Icinga 2.x through 2.8.1.
Priority LOW 34
An issue was discovered in Icinga 2.x through 2.8.1.
TI-2018-04811 CVE-2018-6532 · GHSA-7vvj-647q-jgx2
An issue was discovered in Icinga 2.x through 2.8.1.
Priority LOW 36
An issue was discovered in Icinga 2.x through 2.8.1.
TI-2018-04815 CVE-2018-6536 · GHSA-653v-x44f-wmwh
An issue was discovered in Icinga 2.x through 2.8.1.
Priority LOW 24
An issue was discovered in Icinga 2.x through 2.8.1.
TI-2017-12469 CVE-2017-16933 · GHSA-v3ww-m662-2527
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename…
Priority LOW 31
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for crea…
TI-2017-12427 CVE-2017-16882 · GHSA-rc9c-mrhp-7jg8
Icinga Core through 1.14.0 initially executes bin/icinga as root but supports…
Priority LOW 34
Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), w…
TI-2015-06660 CVE-2015-8010 · GHSA-x57r-7jqf-5w9p
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and…
Priority LOW 30
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-…
TI-2014-01899 CVE-2014-2386 · GHSA-9prg-2xvx-hr7x
Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers…
Priority LOW 28
Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_sel…
TI-2014-01463 CVE-2014-1878 · GHSA-fv88-xv9q-4vg3
Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core…
Priority LOW 29
Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a den…
TI-2013-05840 CVE-2013-7108 · GHSA-48qr-xf75-jc6h
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before…
Priority MEDIUM 60
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory…