icingaweb2 vulnerabilities (Ubuntu)
16 vulnerabilities.
-
icingaweb2Ubuntu Incinga Web 2.8.2 Client-Side Cross-Site Scripting via EventListener 4.8 Medium -
icingaweb2Ubuntu Icinga Web 2 has open redirect on login page 4.1 Medium -
icingaweb2Ubuntu Icinga Web 2 Vulnerable to Reflected XSS 1.1 Low -
icingaweb2Ubuntu Icinga Web 2 has XSS in embedded content 7.7 High -
icingaweb2Ubuntu Icinga Web 2 DOM-based XSS vulnerability 7.7 High -
icingaweb2Ubuntu External Control of File Name or Path in dompdf/dompdf 5.3 Medium -
icingaweb2Ubuntu Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2 5.3 Medium -
icingaweb2Ubuntu Path traversal in Icinga Web 2 7.5 High -
icingaweb2Ubuntu Arbitrary code execution for authenticated users in Icinga Web 2 8.5 High -
icingaweb2Ubuntu Custom variable protection and blacklists can be circumvented 5.3 Medium -
icingaweb2Ubuntu Possible path traversal by use of the `doc` module 5.3 Medium -
icingaweb2Ubuntu Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a... 7.5 High -
icingaweb2Ubuntu Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving... 9.8 Critical -
icingaweb2Ubuntu Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2... 6.1 Medium -
icingaweb2Ubuntu Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter. 5.4 Medium -
icingaweb2Ubuntu Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to... 6.5 Medium