Login Request a demo
IW
Product
Icinga Web 2
by Icinga · last CVE Mar 26, 2025
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 4Medium 8Low 0
Severity
All severities13Critical1High4Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Icinga Web 2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-18246
6.5
0%
Dec 17
Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to…
Affected: before 2.6.2
CVE-2025-30164
6.1
0%
Mar 26
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface
Affected: before 2.11.5; 2.12.0 before 2.12.3
CVE-2025-27405
6.1
0%
Mar 26
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface
Affected: before 2.11.5; 2.12.0 before 2.12.3
CVE-2025-27404
6.1
1%
Mar 26
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface
Affected: before 2.11.5; 2.12.0 before 2.12.3
CVE-2018-18248
6.1
1%
Dec 17
Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the…
Affected: 2.6.1
CVE-2025-27609
5.4
0%
Mar 26
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface
Affected: before 2.11.5; 2.12.0 before 2.12.3
CVE-2018-18247
5.4
1%
Dec 17
Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter
Affected: before 2.6.2
CVE-2022-24714
5.3
1%
Mar 8
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface
Affected: before 2.8.6; 2.9.0 before 2.9.6
Showing 8