| Bug | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-0000000-F4C261 | fixed | fixed | vulnerable | fixed | GHSA-grpw-587v-93vw: Stored XSS through navigation item names in sidebar submenu headers |
| TEMP-0000000-6999AA | vulnerable | vulnerable | vulnerable | fixed | GHSA-mph2-hvq4-8423: Unauthenticated file read and denial of service through chart endpoints |
| TEMP-0000000-18A8DB | vulnerable | vulnerable | vulnerable | fixed | GHSA-fmf2-272p-p3r9: Missing ownership check lets users remove other users' remembered devices |
| TEMP-0000000-0AD897 | vulnerable | vulnerable | vulnerable | fixed | GHSA-jff6-vjrf-q9gj: Wildcards in login names grant the group memberships of other users |
| CVE-2025-30164 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2025-27609 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2025-27405 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2025-27404 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2022-50942 | undetermined | undetermined | undetermined | undetermined | Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerab ... |
| Bug | Description |
|---|
| CVE-2022-24716 | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2022-24715 | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2022-24714 | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2021-32747 | Icinga Web 2 is an open source monitoring web interface, framework, an ... |
| CVE-2021-32746 | Icinga Web 2 is an open source monitoring web interface, framework and ... |
| CVE-2020-24368 | Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Director ... |
| CVE-2018-18250 | Icinga Web 2 before 2.6.2 allows parameters that break navigation dash ... |
| CVE-2018-18249 | Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives ... |
| CVE-2018-18248 | Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir ... |
| CVE-2018-18247 | Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add i ... |
| CVE-2018-18246 | Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisabl ... |