Checkmk
Page 2 of 2 — Checkmk CVEs from a corpus of 110, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40906 | Medium | 6.1 | 2022-03-25 | CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflecte… |
CVE-2021-40905 | High | 8.8 | 2022-03-25 | The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extens… |
CVE-2021-40904 | High | 8.8 | 2022-03-25 | The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which all… |
CVE-2022-24566 | Medium | 5.4 | 2022-02-24 | In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as con… |
CVE-2022-24565 | Medium | 5.4 | 2022-02-24 | Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site w… |
CVE-2022-24564 | Medium | 6.1 | 2022-02-21 | Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection… |
CVE-2020-28919 | Medium | 5.4 | 2022-01-15 | A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript vi… |
CVE-2021-36563 | Medium | 5.4 | 2021-07-26 | The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the WATO module. This allows an attacker to… |
CVE-2020-24908 | High | 7.8 | 2021-02-19 | Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory. |
CVE-2017-14955 | Medium | 5.9 | 2017-10-02 | Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain se… |