Vulnerabilities

TI-2019-06659 CVE-2019-9202 · GHSA-6977-jm4x-ff2g

Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.

MEDIUM 59

Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.2377 Published 2019-03-28 No fix listed

TI-2019-06660 CVE-2019-9203 · GHSA-5ffq-45w7-8pq6

MEDIUM 61

Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20368 Published 2019-03-28 No fix listed

TI-2019-06661 CVE-2019-9204 · GHSA-8jqf-v326-vr98

MEDIUM 60

SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19685 Published 2019-03-28 No fix listed CWE-89