Lucene search
NagiosIncident Manager
3 matches found
CVE-2019-9204
SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.
9.8CVSS9.9AI score0.19677EPSS
CVE-2019-9202
Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.
8.8CVSS8.8AI score0.61301EPSS
CVE-2019-9203
Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
9.8CVSS9.3AI score0.01962EPSS