Lucene search

K
nvd[email protected]NVD:CVE-2023-48084
HistoryDec 14, 2023 - 7:15 a.m.

CVE-2023-48084

2023-12-1407:15:08
CWE-89
web.nvd.nist.gov
nagios xi
sql injection
vulnerability
version 5.11.3

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.081 Low

EPSS

Percentile

94.3%

Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.

Affected configurations

NVD
Node
nagiosnagios_xiRange<5.11.3

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.081 Low

EPSS

Percentile

94.3%