Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40933
HistorySep 19, 2023 - 11:15 p.m.

Sql injection

2023-09-1923:15:00
PRIOn knowledge base
www.prio-n.com
84
vulnerability
authenticated attackers
announcement banner configuration
sql commands
id parameter
update_banner_message()

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the update_banner_message() function.

CPENameOperatorVersion
nagios_xilt5.11.2

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

Related for PRION:CVE-2023-40933