CVE-2019-9204

9.8 criticalEPSS 20%

Critical (9.8) in nagios incident manager. EPSS 20% chance of exploitation in the next 30 days.

SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2019-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19