CVE-2023-40933

A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute…

published September 19, 2023

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the update_banner_message() function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03547 · 89.2th percentile
Published
2023-09-19T00:00Z
EPSS history
Timeline
  • 19 SEP 00:00Z
    A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute…
    cvelistv5