Skip to content
OpenAdvisories

Vendor

Icinga

32 known vulnerabilities.

Products

icinga2 12 icingaweb2 10 ipl-web 2 icingadb-web 2 icingaweb2-module-director 2 icinga-powershell-framework 1 icingaweb2-module-reporting 1 icingaweb2-module-incubator 1 icingaweb2-module-jira 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-61637

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Prior to versions 2.12.7…

    Icinga icingaweb2
  • Low 2.4
    CVE-2025-53840

    Icinga DB Web Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    Icinga DB Web provides a graphical interface for Icinga monitoring. Starting in version 1.2.0 and prior to version 1.2.2, users with access to Icinga Dependency Views, are allowed to see hosts and services that they weren't meant to on the dependency map. How…

    Icinga icingadb-web
  • Low 1.1
    CVE-2025-27609

    Icinga Web 2 Vulnerable to Reflected XSS

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbit…

    Icinga icingaweb2 icingaweb2 icingaweb2 Debian Ubuntu
  • Low 3.9
    CVE-2024-41811

    ipl/web susceptible to Cross-Site Request Forgery (CSRF)

    ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once `ic…

    Icinga ipl-web ipl/web icinga-php-library Debian Ubuntu Packagist