← Back

Incident Manager

incident_manager

Vendor: Nagios • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nagios
1Incident Manager
Jun 17, 2026
Mar 28, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.
1Nagios
1Incident Manager
Jun 17, 2026
Mar 28, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
1Nagios
1Incident Manager
Jun 17, 2026
Mar 28, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.