IC
Product
Icinga
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 10Medium 9Low 0
Watch
Add Icinga to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48057 | 9.8 | May 27 | Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting Affected: before 2.12.12; 2.13.0 before 2.13.12; 2.14.0 before 2.14.6 |
| CVE-2024-49369 | 9.8 | Nov 12 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting Affected: 2.4.0 before 2.11.12; 2.12.0 before 2.12.11; 2.13.0 before 2.13.10; 2.14.0 before 2.14.3 |
| CVE-2020-29663 | 9.1 | Dec 15 | Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL Affected: 2.8.0 through 2.11.7; 2.12.2 |
| CVE-2021-32743 | 8.8 | Jul 15 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting Affected: 2.0.0 before 2.11.10; 2.12.0 before 2.12.5 |
| CVE-2021-32739 | 8.8 | Jul 15 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting Affected: 2.4.0 before 2.11.10; 2.12.0 before 2.12.5 |
| CVE-2024-24820 | 8.3 | Feb 9 | Icinga Director is a tool designed to make Icinga 2 configuration handling easy Affected: 1.0.0 before 1.8.2; 1.9.0 before 1.9.2; 1.10.0 before 1.10.3; 1.11.0 before 1.11.3 |
| CVE-2018-6535 | 8.1 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 Affected: 2.0.0 through 2.8.1 |
| CVE-2020-14004 | 7.8 | Jun 12 | An issue was discovered in Icinga2 before v2.12.0-rc1 Affected: 2.0.0 through 2.11.3; 2.12.0 |
| CVE-2018-6533 | 7.8 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 Affected: 2.0.0 through 2.8.1 |
| CVE-2017-16882 | 7.8 | Nov 18 | Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have… Affected: through 1.14.0 |
| CVE-2021-37698 | 7.5 | Aug 19 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting Affected: 2.5.0 before 2.11.10; 2.12.0 before 2.12.6; 2.13.0 before 2.13.1 |
| CVE-2018-6532 | 7.5 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 Affected: 2.0.0 through 2.8.0 |
| CVE-2017-16933 | 7.0 | Nov 24 | etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging… Affected: 2.0.0 through 2.8.0 |
| CVE-2025-61908 | 6.5 | Oct 16 | Icinga 2 is an open source monitoring system Affected: 2.10.0 before 2.13.13; 2.14.0 before 2.14.7; 2.15.0 before 2.15.1 |
| CVE-2025-61907 | 6.5 | Oct 16 | Icinga 2 is an open source monitoring system Affected: 2.4.0 before 2.13.13; 2.14.0 before 2.14.7; 2.15.0 |
| CVE-2021-32747 | 6.5 | Jul 12 | Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface Affected: 2.0.0 before 2.7.5; 2.8.0 before 2.8.3 |
| CVE-2018-6534 | 6.5 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 Affected: 2.0.0 through 2.8.1 |
| CVE-2015-8010 | 6.1 | Mar 27 | Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web… Affected: through 1.13.4 |
| CVE-2026-24413 | 5.5 | Jan 29 | Icinga 2 is an open source monitoring system Affected: 2.3.0 before 2.13.14; 2.14.0 before 2.14.8; 2.15.0 before 2.15.2 |
| CVE-2018-6536 | 5.5 | Feb 2 | An issue was discovered in Icinga 2.x through 2.8.1 Affected: 2.0.0 through 2.8.1 |
| CVE-2021-32746 | 5.3 | Jul 12 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface Affected: 2.3.0 before 2.7.5; 2.8.0 before 2.8.3 |
| CVE-2025-61909 | 4.4 | Oct 16 | Icinga 2 is an open source monitoring system Affected: 2.10.0 before 2.13.13; 2.14.0 before 2.14.7; 2.15.0 |
| CVE-2014-2386 | – | Mar 25 | Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1)… Affected: through 1.10.2; 1.10.0; 1.10.1 |
| CVE-2014-1878 | – | Feb 28 | Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before… Affected: through 1.8.5; 1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4; +8 more |
| CVE-2013-7108 | – | Jan 15 | Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain… Affected: through 1.8.4; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +29 more |
| CVE-2013-7106 | – | Jan 15 | Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and… Affected: through 1.8.4; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +29 more |
| CVE-2013-7107 | – | Jan 14 | Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for… Affected: through 1.10.2; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +32 more |
| CVE-2012-6096 | – | Jan 22 | Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before… Affected: 1.6.0; 1.6.1; 1.7.0; 1.7.1; 1.7.2; 1.7.3; +4 more |
| CVE-2012-3441 | – | Aug 25 | The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access… Affected: 1.7.1 |
| CVE-2011-2477 | – | Jun 14 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary… Affected: through 1.4.0; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more |
| CVE-2011-2179 | – | Jun 14 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script… Affected: through 1.4.0; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more |
Showing 31