Skip to content
OpenAdvisories

Vendor

Icinga

31 known vulnerabilities.

Products

icinga2 12 icingaweb2 9 ipl-web 2 icingadb-web 2 icingaweb2-module-director 2 icinga-powershell-framework 1 icingaweb2-module-reporting 1 icingaweb2-module-incubator 1 icingaweb2-module-jira 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-49369 Public exploit

    Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an atta…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • High 8.5
    CVE-2022-24715 Public exploit EPSS 15%

    Arbitrary code execution for authenticated users in Icinga Web 2

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This iss…

    Icinga icingaweb2 icingaweb2 icingaweb2 Debian Ubuntu
  • High 7.5
    CVE-2022-24716 Public exploit EPSS 89%

    Path traversal in Icinga Web 2

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database…

    Icinga icingaweb2 icingaweb2 icingaweb2 Debian Ubuntu