Checkmk Gmbh Checkmk vulnerabilities, page 5
93 vulnerabilities
Known vulnerabilities in Checkmk Gmbh Checkmk, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-33456checkmk gmbhcheckmk+2
EPSS score0.34%
Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.CVE-2023-31208checkmk gmbhcheckmk+3EPSS score0.97%
Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.CVE-2023-31210checkmk gmbhcheckmk+2EPSS score0.54%
Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious librariesCVE-2023-31211checkmk gmbhcheckmk+3EPSS score0.51%
Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentialsCVE-2023-31209checkmk gmbhcheckmk+3EPSS score1.13%
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.CVE-2023-22348checkmk gmbhcheckmk+3EPSS score0.59%
Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.CVE-2023-6251checkmk gmbhcheckmk+2EPSS score0.23%
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.CVE-2023-6157checkmk gmbhcheckmk+2EPSS score0.89%
Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.CVE-2023-6156checkmk gmbhcheckmk+2EPSS score0.86%
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.CVE-2023-6735checkmk gmbhcheckmk+3EPSS score0.28%
Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privilegesCVE-2023-6740checkmk gmbhcheckmk+3EPSS score0.18%
Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privilegesCVE-2023-23549checkmk gmbhcheckmk+2EPSS score0.65%
Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.CVE-2023-23548checkmk gmbhcheckmk+2EPSS score0.41%
Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30.