📦 Icinga Web 2

by Icinga

🔍 What is Icinga Web 2?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-27404

HIGH CVSS 7.6 Mar 26, 2025

This is a cross-site scripting (XSS) vulnerability in Icinga Web 2 that allows attackers to craft malicious URLs. When any user visits such a URL, arbitrary JavaScript can be executed in their browser...

CVE-2022-24715

HIGH CVSS 8.5 Mar 8, 2022

This vulnerability allows authenticated users with configuration access in Icinga Web 2 to create SSH resource files in unintended directories, leading to remote code execution. It affects Icinga Web ...

CVE-2025-27609

MEDIUM CVSS 5.4 Mar 26, 2025

CVE-2025-27609 is a cross-site scripting (XSS) vulnerability in Icinga Web 2 that allows attackers to inject arbitrary JavaScript into the web interface. When exploited, this enables attackers to perf...