[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiy--fCqC10OHmuLTjPzHvGrnvb0GHCFr2ntCG9BnLBg":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":37,"kevVulnerabilities":97,"topProductsByCves":98,"seoMetadata":103,"meta":112},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":36},14095,"icinga",4,41,0,241,"2025-10-16","i",[16,20,26,31],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},79382,192,26,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},79383,"icinga_web_2",39,13,"2025-03-26",{"id":27,"product_name":28,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":30},79384,"icingaweb2-module-incubator",1,"2024-02-09",{"id":32,"product_name":33,"version_count":34,"cve_count":29,"kev_count":11,"last_cve_update":35},79385,"icinga_web_jira_integration",9,"2023-07-05","Icinga is a technology vendor with 4 tracked products and 41 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[38,47,53,60,66,71,76,82,87,92],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":45,"epssScore":46},"CVE-2022-24716","Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","2022-03-08",7.5,"v3.1","High",false,0.89378,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":42,"cvssVersion":51,"severity":44,"isKev":45,"epssScore":52},"CVE-2012-6096","Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.","2013-01-22","v2",0.6645,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":51,"severity":58,"isKev":45,"epssScore":59},"CVE-2013-7108","Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) avail.c, (2) cmd.c, (3) config.c, (4) extinfo.c, (5) histogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi\u002F, which triggers a heap-based buffer over-read.","2014-01-15",5.5,"Medium",0.61625,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":51,"severity":58,"isKev":45,"epssScore":65},"CVE-2011-2179","Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.","2011-06-14",4.3,0.26037,{"cveId":67,"description":68,"publishedDate":41,"cvssScore":69,"cvssVersion":43,"severity":44,"isKev":45,"epssScore":70},"CVE-2022-24715","Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issue has been resolved in versions 2.8.6, 2.9.6 and 2.10 of Icinga Web 2. Users unable to upgrade should limit access to the Icinga Web 2 configuration.",8.8,0.1467,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":45,"epssScore":75},"CVE-2020-24368","Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web 2. This issue is fixed in Icinga Web 2 in v2.6.4, v2.7.4 and v2.8.2.","2020-08-19",0.0328,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":51,"severity":58,"isKev":45,"epssScore":81},"CVE-2014-1878","Stack-based buffer overflow in the cmd_submitf function in cgi\u002Fcmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.","2014-02-28",5,0.03195,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":80,"cvssVersion":51,"severity":58,"isKev":45,"epssScore":86},"CVE-2014-2386","Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_selector, or (4) page_limit_selector function in cgi\u002Fcgiutils.c or (5) status_page_num_selector function in cgi\u002Fstatus.c, which triggers a stack-based buffer overflow.","2014-03-25",0.02808,{"cveId":88,"description":89,"publishedDate":56,"cvssScore":90,"cvssVersion":51,"severity":58,"isKev":45,"epssScore":91},"CVE-2013-7106","Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_table, (2) page_limit_selector, (3) print_export_link, or (4) page_num_selector function in cgi\u002Fcgiutils.c; (5) status_page_num_selector function in cgi\u002Fstatus.c; or (6) display_command_expansion function in cgi\u002Fconfig.c.  NOTE: this can be exploited without authentication by leveraging CVE-2013-7107.",6.5,0.0254,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":42,"cvssVersion":51,"severity":44,"isKev":45,"epssScore":96},"CVE-2012-3441","The database creation script (module\u002Fidoutils\u002Fdb\u002Fscripts\u002Fcreate_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.","2012-08-25",0.02409,[],[99,100,101,102],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":29,"kev_count":11,"last_cve_update":35},{"title":104,"metaDescription":105,"keywords":106,"structuredData":107},"Icinga - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Icinga covering 4 products with 41 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Icinga vulnerabilities, Icinga security, Icinga CVE, Icinga threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":108,"@type":109,"name":110,"description":105,"url":111},"https:\u002F\u002Fschema.org","Organization","Icinga","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ficinga",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":113,"apiVersion":114},"2026-10-18T22:14:48.330Z","3.0"]