Checkmk Gmbh vulnerabilities
100 CVEs and advisories name Checkmk Gmbh as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-38862SNMP and IMPI secrets written to audit log
- CVE-2024-6747Information leak in mknotifyd
- CVE-2024-8606Fix 2FA bypass via RestAPI
- CVE-2024-38860Reflected links in error message facilitate phishing attacks
- CVE-2024-6572Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'
- CVE-2024-38858Cross-site scripting in Robotmk logs view
- CVE-2024-38859XSS in view page with SLA column
- CVE-2024-28829Privilege escalation in mk_informix plugin
- CVE-2024-6542Livestatus injection in mknotifyd
- CVE-2024-288281-Click compromize via CSRF
- CVE-2024-28827Privilege escalation in Windows agent
- CVE-2024-6163local IP restriction of internal HTTP endpoints
- CVE-2024-6052XSS in SQL check parameters
- CVE-2024-38857Reflected links in visuals facilitate phishing attacks
- CVE-2024-28830Automation user secrets written to audit log
- CVE-2024-28832XSS in Crash Report Page
- CVE-2024-28831XSS in confirmation pop-up
- CVE-2024-5741XSS in inventory view
- CVE-2024-28833Missing brute-force protection for two factor authentication
- CVE-2024-28826Unrestricted upload and download paths in check_sftp
- CVE-2024-28825Brute-force protection ineffective for some login methods
- CVE-2024-3367Argument injection to runmqsc
- CVE-2024-2380XSS in graph rendering
- CVE-2024-28824Privilege escalation in mk_informix plugin
- CVE-2024-1742Information disclosure in mk_oracle Checkmk agent plugin
- CVE-2024-0638Privilege escalation in mk_oracle plugins
- CVE-2024-0670Privilege escalation in windows agent
- CVE-2023-6740Privilege escalation in jar_signature
- CVE-2023-6735Privilege escalation in mk_tsm
- CVE-2023-31211Disabled automation users could still authenticate