Lucene search

K
cvelistMitreCVELIST:CVE-2023-40934
HistorySep 19, 2023 - 12:00 a.m.

CVE-2023-40934

2023-09-1900:00:00
mitre
www.cve.org
3
vulnerability
nagios xi
authenticated attackers
sql commands
core configuration manager
host escalations

AI Score

8.3

Confidence

High

EPSS

0.003

Percentile

70.7%

A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings.

AI Score

8.3

Confidence

High

EPSS

0.003

Percentile

70.7%

Related for CVELIST:CVE-2023-40934