Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40934
HistorySep 19, 2023 - 11:15 p.m.

Sql injection

2023-09-1923:15:00
PRIOn knowledge base
www.prio-n.com
7
sql injection
nagios xi 5.11.1
vulnerability
authenticated attackers
core configuration manager
arbitrary sql commands
host escalations
notification settings

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings.

CPENameOperatorVersion
nagios_xilt5.11.2

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

Related for PRION:CVE-2023-40934