Skip to contentCheckmk Gmbh Checkmk vulnerabilities
- checkmkReading host_configs does not honour contact groupsCVE-2023-223484.3 Medium
- checkmkLivestatus command injection in RestAPICVE-2023-312088.3 High
- checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 moreDenial of service against webconfCVE-2023-223187.5 High
- checkmkAutomation user secret logged to Apache access logCVE-2023-312074.4 Medium
- checkmkRemote Code Execution with Root Privileges via Broad Apache PermissionsCVE-2022-463028.8 High
- checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 moreReflected Cross Site Scripting (XSS)CVE-2023-223096.1 Medium
- checkmk gmbh appliance, tribe29 checkmk, checkmk appliance +2 morePrivilege escalation in Checkmk ApplianceCVE-2023-222948.8 High
- checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 moreSite-Passwords in GET parametersCVE-2023-223075.5 Medium
- checkmkUnauthorized scheduling of downtimes via REST APICVE-2023-20204.3 Medium
- checkmkSymmetric agent data encryption fails silentlyCVE-2023-17683.7 Low
- checkmkEmail HTML InjectionCVE-2023-222886.8 Medium
- checkmkCSRF in add-visual endpointCVE-2022-483205.4 Medium
- checkmkHost secret disclosed in Checkmk logsCVE-2022-483196.5 Medium
- checkmkInsecure access control mechanisms for RestAPI documentationCVE-2022-483185.3 Medium
- checkmkInsecure Termination of RestAPI Session TokensCVE-2022-483175.6 Medium
- checkmkSSRF in agent-receiver APICVE-2022-483216.8 Medium
- checkmkLQL Injection in Livestatus HTTP headersCVE-2022-479096.8 Medium
- checkmkPHP code injection in watolibCVE-2022-468369.1 Critical
- checkmkCommand injection in SMS notificationsCVE-2022-463038.0 High
- checkmkPrivilege escalation via manipulated unixcat executableCVE-2022-434408.8 High
- checkmkImproper validation of LDAP user IDsCVE-2023-02846.8 Medium
- checkmkPath-Traversal in MKP storingCVE-2022-48843.5 Low