CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. Its EPSS score suggests a 11.3% probability of exploitation in the next 30 days. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-40931
Severity
MEDIUM
CVSS
6.5
EPSS
11.28%
Original NVD Description
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php
Related CVEs
Other vulnerabilities affecting the same vendor(s)