CVE-2012-10063 in Nagiosinformación

Resumen

por MITRE • 2025-10-31

Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager (CCM) interface. Authenticated users could manipulate SQL queries by supplying crafted input to specific CCM parameters, potentially allowing access to configuration data stored in the application database. Successful exploitation could disclose or modify notification data and, in some cases, impact the application database more broadly.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

VulnCheck

Reservar

2025-10-28

Divulgación

2025-10-31

Moderación

aceptado

Artículo

VDB-330646

CPE

listo

EPSS

0.01409

KEV

no

Actividades

muy bajo

Fuentes

Do you want to use VulDB in your project?

Use the official API to access entries easily!