Nagios Incident Manager vulnerabilities

3 vulnerabilities

Known vulnerabilities in Nagios Incident Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-9203nagiosincident_manager
EPSS score
20.37%
Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.8.8CVE-2019-9202nagiosincident_manager
EPSS score
23.77%
Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.9.8CVE-2019-9204nagiosincident_manager
EPSS score
19.68%
SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.