Nagios: >> Incident Manager >> 2.0.1 Security Vulnerabilities
Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.
CVSS Score
8.8
EPSS Score
0.623
Published
2019-03-28
Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
CVSS Score
9.8
EPSS Score
0.02
Published
2019-03-28
SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.
CVSS Score
9.8
EPSS Score
0.197
Published
2019-03-28