Vulnerabilities in Icinga
31 resultsCVE-2025-27406HIGHIcinga Reporting Stored XSS leads to SSRFEPSS 0.3%CVE-2025-53840LOWIcinga DB Web Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityEPSS 0.3%CVE-2025-30164MEDIUMIcinga Web 2 has open redirect on login pageEPSS 0.3%CVE-2023-30607MEDIUMicingaweb2-module-jira template and field configuration are susceptible to CSRFEPSS 0.3%CVE-2024-24819MEDIUMicingaweb2-module-incubator base implementation for HTML forms is susceptible to CSRFEPSS 0.3%CVE-2026-42224HIGHipl/web is vulnerable to reflected XSS by malformed search requestsEPSS 0.3%CVE-2025-27609LOWIcinga Web 2 Vulnerable to Reflected XSSEPSS 0.3%CVE-2025-61909MEDIUMIcinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon userEPSS 0.2%CVE-2024-41811LOWipl/web susceptible to Cross-Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-24414MEDIUMIcinga for Windows certificate can have too-open permissionsEPSS 0.1%CVE-2026-24413MEDIUMIcinga has insecure permission of %ProgramData%\icinga2\var on WindowsEPSS 0.1%