VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 19, 2023· Updated Jul 9, 2026

CVE-2023-40934

CVE-2023-40934

Description

A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Nagios/XI
    cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*
    Range: <5.11.2
  • Nagios/Nagioscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=5.11.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.