Servers and applications
CVE-2023-40931
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php
- Severity
- Medium 6.5
- Published
- 19 Sept 2023
- Last changed
- 9 Jul 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 5.11.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Nagios XIServers and applications · cpe:a:nagios:nagios_xi |
|