Unrated severityNVD Advisory· Published Sep 19, 2023· Updated Sep 24, 2024

CVE-2023-40934

Description

A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nagios/Nagioscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=5.11.1

Patches

Vulnerability mechanics

References

nagios.commitre
outpost24.com/blog/nagios-xi-vulnerabilities/mitre
www.nagios.com/products/security/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000