Nagios Incident Manager
3 CVEs affecting Nagios Incident Manager. Latest disclosed: 2019-03-28. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9204 | Critical | 9.8 | 2019-03-28 | SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands. |
CVE-2019-9203 | Critical | 9.8 | 2019-03-28 | Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API. |
CVE-2019-9202 | High | 8.8 | 2019-03-28 | Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues. |