Unscored severity · published Jun 14, 2011
CVE-2011-2179
Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script…
–
CVSS
26%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.
Exploitation
Is it being used?
Exploit prediction (EPSS)26.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Icinga · Icinga
through 1.4.0; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more · source: NVD
NA
Nagios · Nagios
3.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2179
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2011-06/0017.html
Exploit
http://archives.neohapsis.com/archives/bugtraq/2011-06/0018.html
secunia.com
http://secunia.com/advisories/44974
securityreason.com
http://securityreason.com/securityalert/8274
Exploit
http://tracker.nagios.org/view.php?id=224
www.openwall.com
http://www.openwall.com/lists/oss-security/2011/06/01/10
More from Icinga
9.8
CVE-2025-48057
Icinga 2 certificate renewal might incorrectly renew an invalid certificate
9.8
CVE-2024-49369
Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections
9.1
CVE-2020-29663
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL
8.8
CVE-2021-32743
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
8.8
CVE-2021-32739
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting