Checkmk GmbH Checkmk

• CVE-2025-2596 Low 2.3 Session logout can be overwritten by long lasting request 0.2%
• CVE-2025-1075 Medium 5.6 LDAP credentials logged to Apache error log 0.3%
• CVE-2024-38864 Medium 4.8 User-Readable Private Key in Windows Agent 0.2%
• CVE-2024-47094 Medium 5.7 Logging of sitesecret to automations log 0.2%
• CVE-2024-38863 Low 2.0 CSRF token leaked in URL parameters 0.4%
• CVE-2024-38862 Medium 5.1 SNMP and IMPI secrets written to audit log 0.3%
• CVE-2024-6747 Medium 5.3 Information leak in mknotifyd 0.4%
• CVE-2024-8606 Critical 9.2 Fix 2FA bypass via RestAPI 0.5%
• CVE-2024-38860 Medium 5.1 Reflected links in error message facilitate phishing attacks 0.3%
• CVE-2024-6572 High 7.4 Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' 0.3%
• CVE-2024-38858 Low 2.3 Cross-site scripting in Robotmk logs view 0.3%
• CVE-2024-38859 Medium 4.8 XSS in view page with SLA column 0.4%
• CVE-2024-28829 Medium 5.2 Privilege escalation in mk_informix plugin 0.2%
• CVE-2024-6542 Medium 6.5 Livestatus injection in mknotifyd 0.5%
• CVE-2024-28828 High 8.8 1-Click compromize via CSRF 0.2%
• CVE-2024-28827 High 8.8 Privilege escalation in Windows agent 0.2%
• CVE-2024-6163 Medium 5.3 local IP restriction of internal HTTP endpoints 0.5%
• CVE-2024-6052 Medium 6.5 XSS in SQL check parameters 0.4%
• CVE-2024-38857 Medium 4.3 Reflected links in visuals facilitate phishing attacks 0.3%
• CVE-2024-28830 Low 2.7 Automation user secrets written to audit log 0.3%
• CVE-2024-28832 Medium 4.8 XSS in Crash Report Page 0.3%
• CVE-2024-28831 Medium 5.4 XSS in confirmation pop-up 0.3%
• CVE-2024-5741 Medium 6.5 XSS in inventory view 0.3%
• CVE-2024-28833 Medium 5.9 Missing brute-force protection for two factor authentication 0.4%
• CVE-2024-28826 High 8.8 Unrestricted upload and download paths in check_sftp 0.5%
• CVE-2024-28825 Medium 5.9 Brute-force protection ineffective for some login methods 0.5%
• CVE-2024-3367 Medium 6.5 Argument injection to runmqsc 0.3%
• CVE-2024-2380 Medium 4.6 XSS in graph rendering 0.3%
• CVE-2024-28824 High 8.8 Privilege escalation in mk_informix plugin 0.2%
• CVE-2024-1742 Low 3.8 Information disclosure in mk_oracle Checkmk agent plugin 0.2%
• CVE-2024-0638 High 8.2 Privilege escalation in mk_oracle plugins 0.2%
• CVE-2024-0670 High 8.8 Privilege escalation in windows agent 0.3%
• CVE-2023-6740 High 8.8 Privilege escalation in jar_signature 0.2%
• CVE-2023-6735 High 8.8 Privilege escalation in mk_tsm 0.3%
• CVE-2023-31211 High 8.8 Disabled automation users could still authenticate 0.5%
• CVE-2023-31210 High 8.8 Privilege escalation in agent via LD_LIBRARY_PATH 0.5%
• CVE-2023-6251 Low 3.5 CSRF in delete_user_message 0.2%
• CVE-2023-6157 High 7.6 Livestatus injection in ajax_search 0.9%
• CVE-2023-6156 High 7.6 Livestatus injection in availability timeline 0.9%
• CVE-2023-23549 Low 2.7 DoS via long hostnames 0.6%
• CVE-2023-31209 High 8.8 Command injection via active checks and REST API 1.1%
• CVE-2023-23548 Medium 5.4 XSS in business intelligence 0.4%
• CVE-2023-22348 Medium 4.3 Reading host_configs does not honour contact groups 0.6%
• CVE-2023-31208 High 8.3 Livestatus command injection in RestAPI 1.0%