Vulnerabilidades en Checkmk GmbH
98 resultadosCVE-2024-38863LOWCSRF token leaked in URL parametersEPSS 0.4%CVE-2023-23548MEDIUMXSS in business intelligenceEPSS 0.4%CVE-2024-28833MEDIUMMissing brute-force protection for two factor authenticationEPSS 0.4%CVE-2025-32918MEDIUMLivestatus injection in autocomplete endpointEPSS 0.4%CVE-2024-6052MEDIUMXSS in SQL check parametersEPSS 0.4%CVE-2026-77021MEDIUMMissing decompression size limit in agent receiver allows memory exhaustion via push agent dataEPSS 0.4%CVE-2024-6747MEDIUMInformation leak in mknotifydEPSS 0.4%CVE-2026-17548MEDIUMMissing authorization for viewing background jobsEPSS 0.4%CVE-2026-92882LOWRedact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responsesEPSS 0.4%CVE-2026-8593MEDIUMFix Business Intelligence API Pack permissionEPSS 0.4%CVE-2026-15227MEDIUMMissing Authorization Allows Editing of Foreign ReportsEPSS 0.4%CVE-2026-7485LOWFrozen BI aggregations leak host and service names to unauthorized usersEPSS 0.4%CVE-2025-64998HIGHSession hijacking via exposed session signing secret in distributed Checkmk setupsEPSS 0.3%CVE-2024-2380MEDIUMXSS in graph renderingEPSS 0.3%CVE-2024-28831MEDIUMXSS in confirmation pop-upEPSS 0.3%CVE-2024-6572MEDIUMImproper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'EPSS 0.3%CVE-2024-28830LOWAutomation user secrets written to audit logEPSS 0.3%CVE-2024-28832MEDIUMXSS in Crash Report PageEPSS 0.3%CVE-2024-0670HIGHPrivilege escalation in windows agentEPSS 0.3%CVE-2024-38858LOWCross-site scripting in Robotmk logs viewEPSS 0.3%