Checkmk kayıtları
checkmk üreticisine ait 108 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %75,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17
- CWE-140 Improper Neutralization of Delimiters9
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)8
- CWE-427 Uncontrolled Search Path Element7
- CWE-532 Insertion of Sensitive Information into Log File6
- CWE-20 Improper Input Validation5
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
108 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-28825İstismar yok | Brute-force protection ineffective for some login methodscheckmk · checkmk · CWE-307 | Kritik9,8 | — | %0,5 | 24 Nis 2024 |
39İzleyin | CVE-2022-48317İstismar yok | Insecure Termination of RestAPI Session Tokenscheckmk · checkmk · CWE-613 | Kritik9,8 | — | %0,5 | 20 Şub 2023 |
37İzleyin | CVE-2025-39666İstismar yok | omd: Local privilege escalation when executing omd commands as rootcheckmk · checkmk · CWE-426 | Kritik9,3 | — | %0,1 | 7 Nis 2026 |
36İzleyin | CVE-2021-40904Kavram kanıtı | The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by checkmk · checkmk · CWE-276 | Yüksek8,8 | — | %3,7 | 25 Mar 2022 |
36İzleyin | CVE-2021-40905Kavram kanıtı | The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" filecheckmk · checkmk · CWE-434 | Yüksek8,8 | — | %3,0 | 25 Mar 2022 |
36İzleyin | CVE-2024-8606İstismar yok | Fix 2FA bypass via RestAPIcheckmk · checkmk · CWE-863 | Kritik9,2 | — | %0,5 | 23 Eyl 2024 |
35İzleyin | CVE-2022-46836İstismar yok | PHP code injection in watolibcheckmk · checkmk · CWE-20 | Yüksek8,8 | — | %1,1 | 20 Şub 2023 |
35İzleyin | CVE-2023-31209İstismar yok | Command injection via active checks and REST APIcheckmk · checkmk · CWE-78 | Yüksek8,8 | — | %1,1 | 10 Ağu 2023 |
35İzleyin | CVE-2023-31208İstismar yok | Livestatus command injection in RestAPIcheckmk · checkmk · CWE-140 | Yüksek8,8 | — | %1,0 | 17 May 2023 |
35İzleyin | CVE-2023-6157İstismar yok | Livestatus injection in ajax_searchcheckmk · checkmk · CWE-140 | Yüksek8,8 | — | %0,9 | 22 Kas 2023 |
35İzleyin | CVE-2023-6156İstismar yok | Livestatus injection in availability timelinecheckmk · checkmk · CWE-140 | Yüksek8,8 | — | %0,9 | 22 Kas 2023 |
35İzleyin | CVE-2022-46302İstismar yok | Remote Code Execution with Root Privileges via Broad Apache Permissionscheckmk · checkmk · CWE-829 | Yüksek8,8 | — | %0,4 | 20 Nis 2023 |
35İzleyin | CVE-2025-32919İstismar yok | Privilege Escalation in Windows License plugin for Checkmk Windows Agentcheckmk · checkmk · CWE-427 | Yüksek8,8 | — | %0,3 | 9 Eki 2025 |
35İzleyin | CVE-2024-28828İstismar yok | 1-Click compromize via CSRFcheckmk · checkmk · CWE-352 | Yüksek8,8 | — | %0,2 | 10 Tem 2024 |
34İzleyin | CVE-2025-1712İstismar yok | Arbitrary file write with vcrtracecheckmk · checkmk · CWE-88 | Yüksek8,7 | — | %0,8 | 21 May 2025 |
34İzleyin | CVE-2025-39663İstismar yok | Cross Site Scripting through compromised remote sitecheckmk · checkmk · CWE-80 | Yüksek8,5 | — | %0,6 | 30 Eki 2025 |
34İzleyin | CVE-2026-3466İstismar yok | Cross-site scripting in dashlet titlecheckmk · checkmk · CWE-79 | Yüksek8,5 | — | %0,3 | 7 Nis 2026 |
34İzleyin | CVE-2026-8833İstismar yok | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 vcheckmk · checkmk · CWE-79 | Yüksek8,5 | — | %0,2 | 8 Haz 2026 |
34İzleyin | CVE-2026-33276İstismar yok | XSS in Unified Search via Unescaped Host/Service Namescheckmk · checkmk · CWE-79 | Yüksek8,6 | — | %0,2 | 31 Mar 2026 |
34İzleyin | CVE-2026-7186İstismar yok | Fix stored XSS in URL dashboard widget via dangerous URI schemescheckmk · checkmk · CWE-79 | Yüksek8,5 | — | %0,2 | 8 Haz 2026 |
34İzleyin | CVE-2026-20915İstismar yok | Stored cross-site scripting in Pending Changes sidebarcheckmk · checkmk · CWE-79 | Yüksek8,5 | — | %0,1 | 31 Mar 2026 |
32İzleyin | CVE-2023-0284İstismar yok | Improper validation of LDAP user IDscheckmk · checkmk · CWE-20 | Yüksek8,1 | — | %0,9 | 26 Oca 2023 |
32İzleyin | CVE-2024-28826İstismar yok | Unrestricted upload and download paths in check_sftpcheckmk · checkmk · CWE-73 | Yüksek8,1 | — | %0,5 | 29 May 2024 |
31İzleyin | CVE-2023-31210İstismar yok | Privilege escalation in agent via LD_LIBRARY_PATHcheckmk · checkmk · CWE-427 | Yüksek7,8 | — | %0,5 | 13 Ara 2023 |
31İzleyin | CVE-2022-47909İstismar yok | LQL Injection in Livestatus HTTP headerscheckmk · checkmk · CWE-20 | Yüksek7,8 | — | %0,4 | 20 Şub 2023 |
- CVE-2024-2882539İzleyin
Brute-force protection ineffective for some login methods
KritikCVSS 9,8İstismar yokEPSS %1checkmk · checkmk24 Nis 2024
- CVE-2022-4831739İzleyin
Insecure Termination of RestAPI Session Tokens
KritikCVSS 9,8İstismar yokEPSS %0checkmk · checkmk20 Şub 2023
- CVE-2025-3966637İzleyin
omd: Local privilege escalation when executing omd commands as root
KritikCVSS 9,3İstismar yokEPSS %0checkmk · checkmk7 Nis 2026
- CVE-2021-4090436İzleyin
The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by
YüksekCVSS 8,8Kavram kanıtıEPSS %4checkmk · checkmk25 Mar 2022
- CVE-2021-4090536İzleyin
The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" file
YüksekCVSS 8,8Kavram kanıtıEPSS %3checkmk · checkmk25 Mar 2022
- CVE-2024-860636İzleyin
Fix 2FA bypass via RestAPI
KritikCVSS 9,2İstismar yokEPSS %0checkmk · checkmk23 Eyl 2024
- CVE-2022-4683635İzleyin
PHP code injection in watolib
YüksekCVSS 8,8İstismar yokEPSS %1checkmk · checkmk20 Şub 2023
- CVE-2023-3120935İzleyin
Command injection via active checks and REST API
YüksekCVSS 8,8İstismar yokEPSS %1checkmk · checkmk10 Ağu 2023
- CVE-2023-3120835İzleyin
Livestatus command injection in RestAPI
YüksekCVSS 8,8İstismar yokEPSS %1checkmk · checkmk17 May 2023
- CVE-2023-615735İzleyin
Livestatus injection in ajax_search
YüksekCVSS 8,8İstismar yokEPSS %1checkmk · checkmk22 Kas 2023
- CVE-2023-615635İzleyin
Livestatus injection in availability timeline
YüksekCVSS 8,8İstismar yokEPSS %1checkmk · checkmk22 Kas 2023
- CVE-2022-4630235İzleyin
Remote Code Execution with Root Privileges via Broad Apache Permissions
YüksekCVSS 8,8İstismar yokEPSS %0checkmk · checkmk20 Nis 2023
- CVE-2025-3291935İzleyin
Privilege Escalation in Windows License plugin for Checkmk Windows Agent
YüksekCVSS 8,8İstismar yokEPSS %0checkmk · checkmk9 Eki 2025
- CVE-2024-2882835İzleyin
1-Click compromize via CSRF
YüksekCVSS 8,8İstismar yokEPSS %0checkmk · checkmk10 Tem 2024
- CVE-2025-171234İzleyin
Arbitrary file write with vcrtrace
YüksekCVSS 8,7İstismar yokEPSS %1checkmk · checkmk21 May 2025
- CVE-2025-3966334İzleyin
Cross Site Scripting through compromised remote site
YüksekCVSS 8,5İstismar yokEPSS %1checkmk · checkmk30 Eki 2025
- CVE-2026-346634İzleyin
Cross-site scripting in dashlet title
YüksekCVSS 8,5İstismar yokEPSS %0checkmk · checkmk7 Nis 2026
- CVE-2026-883334İzleyin
Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 v
YüksekCVSS 8,5İstismar yokEPSS %0checkmk · checkmk8 Haz 2026
- CVE-2026-3327634İzleyin
XSS in Unified Search via Unescaped Host/Service Names
YüksekCVSS 8,6İstismar yokEPSS %0checkmk · checkmk31 Mar 2026
- CVE-2026-718634İzleyin
Fix stored XSS in URL dashboard widget via dangerous URI schemes
YüksekCVSS 8,5İstismar yokEPSS %0checkmk · checkmk8 Haz 2026
- CVE-2026-2091534İzleyin
Stored cross-site scripting in Pending Changes sidebar
YüksekCVSS 8,5İstismar yokEPSS %0checkmk · checkmk31 Mar 2026
- CVE-2023-028432İzleyin
Improper validation of LDAP user IDs
YüksekCVSS 8,1İstismar yokEPSS %1checkmk · checkmk26 Oca 2023
- CVE-2024-2882632İzleyin
Unrestricted upload and download paths in check_sftp
YüksekCVSS 8,1İstismar yokEPSS %0checkmk · checkmk29 May 2024
- CVE-2023-3121031İzleyin
Privilege escalation in agent via LD_LIBRARY_PATH
YüksekCVSS 7,8İstismar yokEPSS %1checkmk · checkmk13 Ara 2023
- CVE-2022-4790931İzleyin
LQL Injection in Livestatus HTTP headers
YüksekCVSS 7,8İstismar yokEPSS %0checkmk · checkmk20 Şub 2023