CVE-2025-30164

< 2.11.5

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior t

4.1MEDIUM

CVE-2025-27609

< 2.11.5

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior t

5.4MEDIUM

CVE-2025-27405

< 2.11.5

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior t

7.6HIGH

CVE-2025-27404

< 2.11.5

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior t

7.6HIGH

CVE-2022-24716

>= 2.9.0 and < 2.9.6

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the

7.5HIGH

CVE-2022-24715

< 2.8.6

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to

8.5HIGH

CVE-2022-24714

< 2.8.6

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the

5.3MEDIUM

CVE-2020-24368

>= 2.0.0 and < 2.6.4

Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access

7.5HIGH

CVE-2018-18250

< 2.6.2

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name

7.5HIGH

CVE-2018-18249

< 2.6.2

Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel t

9.8CRITICAL

CVE-2018-18248

all versions

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icin

6.1MEDIUM

CVE-2018-18247

< 2.6.2

Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.

5.4MEDIUM

CVE-2018-18246

< 2.6.2

Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /

6.5MEDIUM