Icinga Web 2 Security Vulnerabilities and Issues — Icinga Web 2 CVE List

Lucene search

IcingaIcinga Web 2

3 matches found

CVE•added 2018/12/17 3:29 p.m.•113 views

CVE-2018-18248

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.

6.1CVSS6.4AI score0.0024EPSS

Web

CVE•added 2018/12/17 3:29 p.m.•112 views

CVE-2018-18246

Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module.

6.5CVSS6.9AI score0.00117EPSS

Web

CVE•added 2025/03/26 5:15 p.m.•45 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipul...

6.1CVSS6.7AI score0.0004EPSS