IW
Product
Icinga Web 2
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 8Low 0
Watch
Add Icinga Web 2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-49369 | 9.8 | Nov 12 | Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections Affected: 2.4.0 before 2.11.12; 2.12.0 before 2.12.11; 2.13.0 before 2.13.10; 2.14.0 before 2.14.3 |
| CVE-2018-18249 | 9.8 | Dec 17 | Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a… Affected: before 2.6.2 |
Showing 2