icingaweb2 vulnerabilities (Debian)
16 vulnerabilities.
-
icingaweb2Debian Incinga Web 2.8.2 Client-Side Cross-Site Scripting via EventListener 4.8 Medium -
icingaweb2Debian Icinga Web 2 has open redirect on login page 4.1 Medium -
icingaweb2Debian Icinga Web 2 Vulnerable to Reflected XSS 1.1 Low -
icingaweb2Debian Icinga Web 2 has XSS in embedded content 7.7 High -
icingaweb2Debian Icinga Web 2 DOM-based XSS vulnerability 7.7 High -
icingaweb2Debian Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2 5.3 Medium -
icingaweb2Debian Path traversal in Icinga Web 2 7.5 High -
icingaweb2Debian Arbitrary code execution for authenticated users in Icinga Web 2 8.5 High -
icingaweb2Debian Custom variable protection and blacklists can be circumvented 5.3 Medium -
icingaweb2Debian Possible path traversal by use of the `doc` module 5.3 Medium -
icingaweb2Debian Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability... 7.5 High -
icingaweb2Debian Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a... 7.5 High -
icingaweb2Debian Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving... 9.8 Critical -
icingaweb2Debian Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2... 6.1 Medium -
icingaweb2Debian Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter. 5.4 Medium -
icingaweb2Debian Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to... 6.5 Medium