Skip to contentCheckmk vulnerabilities
Newest
- checkmkLivestatus injection in mknotifydCVE-2024-65426.5 Medium
- checkmk1-Click compromize via CSRFCVE-2024-288288.8 High
- checkmkPrivilege escalation in Windows agentCVE-2024-288278.8 High
- checkmklocal IP restriction of internal HTTP endpointsCVE-2024-61635.3 Medium
- checkmkXSS in SQL check parametersCVE-2024-60526.5 Medium
- checkmkReflected links in visuals facilitate phishing attacksCVE-2024-388574.3 Medium
- checkmkAutomation user secrets written to audit logCVE-2024-288302.7 Low
- checkmkXSS in Crash Report PageCVE-2024-288324.8 Medium
- checkmkXSS in confirmation pop-upCVE-2024-288315.4 Medium
- checkmkXSS in inventory viewCVE-2024-57416.5 Medium
- checkmkMissing brute-force protection for two factor authenticationCVE-2024-288335.9 Medium
- checkmkUnrestricted upload and download paths in check_sftpCVE-2024-288268.8 High
- checkmkBrute-force protection ineffective for some login methodsCVE-2024-288255.9 Medium
- checkmkArgument injection to runmqscCVE-2024-33676.5 Medium
- checkmkXSS in graph renderingCVE-2024-23804.6 Medium
- checkmkPrivilege escalation in mk_informix pluginCVE-2024-288248.8 High
- checkmkInformation disclosure in mk_oracle Checkmk agent pluginCVE-2024-17423.8 Low
- checkmkPrivilege escalation in mk_oracle pluginsCVE-2024-06388.2 High
- checkmkPrivilege escalation in windows agentCVE-2024-0670Public exploit8.8 High
- checkmkPrivilege escalation in jar_signatureCVE-2023-67408.8 High
- checkmkPrivilege escalation in mk_tsmCVE-2023-67358.8 High
- checkmkDisabled automation users could still authenticateCVE-2023-312118.8 High
- checkmkPrivilege escalation in agent via LD_LIBRARY_PATHCVE-2023-312108.8 High
- checkmkCSRF in delete_user_messageCVE-2023-62513.5 Low
- checkmkLivestatus injection in ajax_searchCVE-2023-61577.6 High
- checkmkLivestatus injection in availability timelineCVE-2023-61567.6 High
- checkmkDoS via long hostnamesCVE-2023-235492.7 Low
- checkmkCommand injection via active checks and REST APICVE-2023-312098.8 High
- checkmkXSS in business intelligenceCVE-2023-235485.4 Medium
- checkmkUser-enumeration in RestAPICVE-2023-223594.3 Medium
- checkmkReading host_configs does not honour contact groupsCVE-2023-223484.3 Medium
- checkmkLivestatus command injection in RestAPICVE-2023-312088.3 High
- checkmkAutomation user secret logged to Apache access logCVE-2023-312074.4 Medium
- checkmkRemote Code Execution with Root Privileges via Broad Apache PermissionsCVE-2022-463028.8 High
- checkmkUnauthorized scheduling of downtimes via REST APICVE-2023-20204.3 Medium
- checkmkSymmetric agent data encryption fails silentlyCVE-2023-17683.7 Low
- checkmkEmail HTML InjectionCVE-2023-222886.8 Medium
- checkmkCSRF in add-visual endpointCVE-2022-483205.4 Medium
- checkmkHost secret disclosed in Checkmk logsCVE-2022-483196.5 Medium
- checkmkInsecure access control mechanisms for RestAPI documentationCVE-2022-483185.3 Medium
- checkmkInsecure Termination of RestAPI Session TokensCVE-2022-483175.6 Medium
- checkmkSSRF in agent-receiver APICVE-2022-483216.8 Medium
- checkmkLQL Injection in Livestatus HTTP headersCVE-2022-479096.8 Medium
- checkmkPHP code injection in watolibCVE-2022-468369.1 Critical
- checkmkCommand injection in SMS notificationsCVE-2022-463038.0 High
- checkmkPrivilege escalation via manipulated unixcat executableCVE-2022-434408.8 High
- checkmkImproper validation of LDAP user IDsCVE-2023-02846.8 Medium
- checkmkPath-Traversal in MKP storingCVE-2022-48843.5 Low
- checkmkA permission issue affects users that deployed the shipped version of the Checkmk Debian package....CVE-2022-339127.8 High
- checkmkIn Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can...CVE-2022-312588.2 High
- Show moreLoading…