What’s Vulnerable › Products

icingaweb2 vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your icingaweb2 version is affected

Latest icingaweb2 vulnerabilities

• CVE-2025-30164 — Icinga Web 2 has open redirect on login page (CVSS 6.1)
• CVE-2025-27609 — Icinga Web 2 Vulnerable to Reflected XSS (CVSS 5.4)
• CVE-2025-27405 — Icinga Web 2 has XSS in embedded content (CVSS 6.1)
• CVE-2025-27404 — Icinga Web 2 DOM-based XSS vulnerability (CVSS 6.1)
• CVE-2022-24716 — Path traversal in Icinga Web 2 (CVSS 7.5)
• CVE-2022-24715 — Arbitrary code execution for authenticated users in Icinga Web 2 (CVSS 8.8)
• CVE-2022-24714 — Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2 (CVSS 5.3)
• CVE-2020-24368 — (CVSS 7.5)
• CVE-2018-18250 — (CVSS 7.5)
• CVE-2018-18249 — (CVSS 9.8)
• CVE-2018-18248 — (CVSS 6.1)
• CVE-2018-18247 — (CVSS 5.4)
• CVE-2018-18246 — (CVSS 6.5)