Nagios: >> Incident Manager >> 2.0.1 Security Vulnerabilities
Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.
CVSS Score
8.8
EPSS Score
0.553
Published
2019-03-28
Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
CVSS Score
9.8
EPSS Score
0.015
Published
2019-03-28
SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.
CVSS Score
9.8
EPSS Score
0.134
Published
2019-03-28