Lucene search

K
cvelistMitreCVELIST:CVE-2023-40934
HistorySep 19, 2023 - 12:00 a.m.

CVE-2023-40934

2023-09-1900:00:00
mitre
www.cve.org
1
vulnerability
nagios xi
authenticated attackers
sql commands
core configuration manager
host escalations

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings.

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

Related for CVELIST:CVE-2023-40934