Lucene search

K
cvelistMitreCVELIST:CVE-2023-40931
HistorySep 19, 2023 - 12:00 a.m.

CVE-2023-40931

2023-09-1900:00:00
mitre
www.cve.org
1
cve-2023-40931
nagios xi
sql injection
authenticated attackers
arbitrary sql commands

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

Related for CVELIST:CVE-2023-40931