Icinga icingaweb2 vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20223
3. 20254

Newest CVEs

• CVE-2025-30164

  Icinga Web 2 has open redirect on login page

  Icinga · icingaweb2

  Medium4.1
• CVE-2025-27609

  Icinga Web 2 Vulnerable to Reflected XSS

  Icinga · icingaweb2

  Low1.1
• CVE-2025-27405

  Icinga Web 2 has XSS in embedded content

  Icinga · icingaweb2

  High7.7
• CVE-2025-27404

  Icinga Web 2 DOM-based XSS vulnerability

  Icinga · icingaweb2

  High7.7
• CVE-2022-24714

  Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2

  Icinga · icingaweb2

  Medium5.3
• CVE-2022-24716

  Path traversal in Icinga Web 2

  Icinga · icingaweb2

  High7.5
• CVE-2022-24715

  Arbitrary code execution for authenticated users in Icinga Web 2

  Icinga · icingaweb2

  High8.5
• CVE-2021-32747

  Custom variable protection and blacklists can be circumvented

  Icinga · icingaweb2

  Medium5.3
• CVE-2021-32746

  Possible path traversal by use of the `doc` module

  Icinga · icingaweb2

  Medium5.3