Skip to contentCheckmk Gmbh vulnerabilities
Newest
- checkmkSensitive data exposed during automatic agent updatesCVE-2025-329154.3 Medium
- checkmkArbitrary file write with vcrtraceCVE-2025-17128.7 High
- checkmkPrivilege escalation in jar_signatureCVE-2025-329175.2 Medium
- checkmkPotentially senitive path exposed via unauthenticated http routeCVE-2025-35066.3 Medium
- checkmkRemote site authentication secrets written to web logCVE-2025-20927.1 High
- checkmkLivestatus command injection in RestAPICVE-2024-388656.0 Medium
- checkmkSession logout can be overwritten by long lasting requestCVE-2025-25962.3 Low
- checkmkLDAP credentials logged to Apache error logCVE-2025-10755.6 Medium
- checkmkUser-Readable Private Key in Windows AgentCVE-2024-388644.8 Medium
- checkmkLogging of sitesecret to automations logCVE-2024-470945.7 Medium
- checkmkCSRF token leaked in URL parametersCVE-2024-388632.0 Low
- checkmkSNMP and IMPI secrets written to audit logCVE-2024-388625.1 Medium
- checkmkInformation leak in mknotifydCVE-2024-67475.3 Medium
- checkmkFix 2FA bypass via RestAPICVE-2024-86069.2 Critical
- checkmkReflected links in error message facilitate phishing attacksCVE-2024-388605.1 Medium
- checkmkImproper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'CVE-2024-65726.3 Medium
- checkmkCross-site scripting in Robotmk logs viewCVE-2024-388582.3 Low
- checkmkXSS in view page with SLA columnCVE-2024-388594.8 Medium
- checkmkPrivilege escalation in mk_informix pluginCVE-2024-288295.2 Medium
- checkmkLivestatus injection in mknotifydCVE-2024-65426.5 Medium
- checkmk1-Click compromize via CSRFCVE-2024-288288.8 High
- checkmkPrivilege escalation in Windows agentCVE-2024-288278.8 High
- checkmklocal IP restriction of internal HTTP endpointsCVE-2024-61635.3 Medium
- checkmkXSS in SQL check parametersCVE-2024-60526.5 Medium
- checkmkReflected links in visuals facilitate phishing attacksCVE-2024-388574.3 Medium
- checkmkAutomation user secrets written to audit logCVE-2024-288302.7 Low
- checkmkXSS in Crash Report PageCVE-2024-288324.8 Medium
- checkmkXSS in confirmation pop-upCVE-2024-288315.4 Medium
- checkmkXSS in inventory viewCVE-2024-57416.5 Medium
- checkmkMissing brute-force protection for two factor authenticationCVE-2024-288335.9 Medium
- checkmkUnrestricted upload and download paths in check_sftpCVE-2024-288268.8 High
- checkmkBrute-force protection ineffective for some login methodsCVE-2024-288255.9 Medium
- checkmkArgument injection to runmqscCVE-2024-33676.5 Medium
- checkmkXSS in graph renderingCVE-2024-23804.6 Medium
- checkmkPrivilege escalation in mk_informix pluginCVE-2024-288248.8 High
- checkmkInformation disclosure in mk_oracle Checkmk agent pluginCVE-2024-17423.8 Low
- checkmkPrivilege escalation in mk_oracle pluginsCVE-2024-06388.2 High
- checkmkPrivilege escalation in windows agentCVE-2024-0670Public exploit8.8 High
- checkmkPrivilege escalation in jar_signatureCVE-2023-67408.8 High
- checkmkPrivilege escalation in mk_tsmCVE-2023-67358.8 High
- checkmkDisabled automation users could still authenticateCVE-2023-312118.8 High
- checkmkPrivilege escalation in agent via LD_LIBRARY_PATHCVE-2023-312108.8 High
- checkmk gmbh appliance, tribe29 checkmk appliance firmware +1 moreBackup password in GET parameterCVE-2023-62873.3 Low
- checkmkCSRF in delete_user_messageCVE-2023-62513.5 Low
- checkmkLivestatus injection in ajax_searchCVE-2023-61577.6 High
- checkmkLivestatus injection in availability timelineCVE-2023-61567.6 High
- checkmkDoS via long hostnamesCVE-2023-235492.7 Low
- checkmkCommand injection via active checks and REST APICVE-2023-312098.8 High
- checkmkXSS in business intelligenceCVE-2023-235485.4 Medium
- checkmkUser-enumeration in RestAPICVE-2023-223594.3 Medium
- Show moreLoading…