Known Vulnerabilities for Icinga Web 2 by Icinga
Listed below are 9 of the newest known vulnerabilities associated with "Icinga Web 2" by "Icinga".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-24893 json | openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Community Edition prior... | Not Provided | 2026-04-14 | 2026-04-15 |
| CVE-2022-24716 json | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak... | 7.5 - HIGH | 2022-03-08 | 2023-04-10 |
| CVE-2022-24715 json | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with acce... | 8.8 - HIGH | 2022-03-08 | 2023-07-17 |
| CVE-2022-24714 json | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with... | 5.3 - MEDIUM | 2022-03-08 | 2022-11-09 |
| CVE-2020-24368 json | Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to a... | 7.5 - HIGH | 2020-08-19 | 2022-12-13 |
| CVE-2018-18250 json | Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the ... | 7.5 - HIGH | 2018-12-17 | 2020-08-24 |
| CVE-2018-18249 json | Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the chan... | 9.8 - CRITICAL | 2018-12-17 | 2020-01-16 |
| CVE-2018-18248 json | Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the ... | 6.1 - MEDIUM | 2018-12-17 | 2020-01-16 |
| CVE-2018-18247 json | Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter. | 5.4 - MEDIUM | 2018-12-17 | 2020-01-16 |
| CVE-2018-18246 json | Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or ... | 6.5 - MEDIUM | 2018-12-17 | 2020-01-16 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Icinga | Icinga Web 2 | 2.8.2 | |||
| Application | Icinga | Icinga Web 2 | 2.8.1 | |||
| Application | Icinga | Icinga Web 2 | 2.8.0 | |||
| Application | Icinga | Icinga Web 2 | 2.8.0 | |||
| Application | Icinga | Icinga Web 2 | 2.7.4 | |||
| Application | Icinga | Icinga Web 2 | 2.7.3 | |||
| Application | Icinga | Icinga Web 2 | 2.7.2 | |||
| Application | Icinga | Icinga Web 2 | 2.7.1 | |||
| Application | Icinga | Icinga Web 2 | 2.7.0 | |||
| Application | Icinga | Icinga Web 2 | 2.6.4 | |||
| Application | Icinga | Icinga Web 2 | 2.6.3 | |||
| Application | Icinga | Icinga Web 2 | 2.6.2 | |||
| Application | Icinga | Icinga Web 2 | 2.6.1 | |||
| Application | Icinga | Icinga Web 2 | 2.6.0 | |||
| Application | Icinga | Icinga Web 2 | 2.5.3 | |||
| Application | Icinga | Icinga Web 2 | 2.5.2 | |||
| Application | Icinga | Icinga Web 2 | 2.5.1 | |||
| Application | Icinga | Icinga Web 2 | 2.5.0 | |||
| Application | Icinga | Icinga Web 2 | 2.4.2 | |||
| Application | Icinga | Icinga Web 2 | 2.4.1 |