Skip to content
Icinga Icingaweb2 vulnerabilities
-
icinga icingaweb2-module-reporting
Icinga Reporting Stored XSS leads to SSRF
CVE-2025-27406
Fix available
7.7 High
-
icinga icingaweb2-module-director
Icinga has rest API endpoints accessible to restricted users
CVE-2025-23203
Fix available
5.5 Medium
-
icinga web 2, icingaweb2 +1 more
Icinga Web 2 has open redirect on login page
CVE-2025-30164
Fix available
4.1 Medium
-
icinga web 2, icingaweb2 +1 more
Icinga Web 2 Vulnerable to Reflected XSS
CVE-2025-27609
Fix available
1.1 Low
-
icinga web 2, icingaweb2 +1 more
Icinga Web 2 has XSS in embedded content
CVE-2025-27405
Fix available
7.7 High
-
icinga web 2, icingaweb2 +1 more
Icinga Web 2 DOM-based XSS vulnerability
CVE-2025-27404
Fix available
7.7 High
-
icinga icingaweb2-module-incubator
icingaweb2-module-incubator base implementation for HTML forms is susceptible to CSRF
CVE-2024-24819
5.3 Medium
-
icinga, icinga icingaweb2-module-director +1 more
Icinga Director configuration is susceptible to Cross-Site Request Forgery
CVE-2024-24820
Fix available
8.3 High
-
icinga icingaweb2-module-jira, web jira integration +1 more
icingaweb2-module-jira template and field configuration are susceptible to CSRF
CVE-2023-30607
5.0 Medium
-
icinga web 2, icingaweb2 +1 more
Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2
CVE-2022-24714
Fix available
5.3 Medium
-
icinga web 2, icingaweb2 +1 more
Path traversal in Icinga Web 2
CVE-2022-24716
Public exploitFix available
EPSS 89.4%
7.5 High
-
icinga web 2, icingaweb2 +1 more
Arbitrary code execution for authenticated users in Icinga Web 2
CVE-2022-24715
Public exploitFix available
EPSS 14.9%
8.5 High
-
icinga, icinga icingaweb2 +1 more
Custom variable protection and blacklists can be circumvented
CVE-2021-32747
Fix available
5.3 Medium
-
icinga, icinga icingaweb2 +1 more
Possible path traversal by use of the `doc` module
CVE-2021-32746
Fix available
5.3 Medium