Product by Icinga

    Icinga Web 2

    13 known vulnerabilities in Icinga Web 2 (Icinga), 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Icinga Web 2 (Icinga)
    HighCVE-2022-24715

    Arbitrary code execution for authenticated users in Icinga Web 2

    also in 1 other product

    		8.5
    HighCVE-2022-24716

    Path traversal in Icinga Web 2

    also in 1 other product

    		7.5
    HighCVE-2020-24368

    Icinga Web 2: Path Traversal

    also in 2 other products

    		7.5
    CriticalCVE-2018-18249

    Icinga Web 2: security vulnerability

    		9.8
    HighCVE-2018-18250

    Icinga Web 2: security vulnerability

    		7.5
    HighCVE-2025-27404

    Icinga Web 2 DOM-based XSS vulnerability

    also in 1 other product

    		7.7
    MediumCVE-2022-24714

    Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2

    also in 1 other product

    		5.3
    MediumCVE-2018-18248

    Icinga Web 2: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2025-27405

    Icinga Web 2 has XSS in embedded content

    also in 1 other product

    		7.7
    MediumCVE-2018-18247

    Icinga Web 2: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2018-18246

    Icinga Web 2: Cross-Site Request Forgery (CSRF)

    		6.5
    MediumCVE-2025-27609

    Icinga Web 2 Vulnerable to Reflected XSS

    also in 1 other product

    		5.4
    MediumCVE-2025-30164

    Icinga Web 2 has open redirect on login page

    also in 1 other product

    		4.1

    All products by Icinga