Tribe29 vulnerabilities, page 2
32 vulnerabilities
Known vulnerabilities in Tribe29 products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
CVE-2023-31207checkmkcheckmk+2
EPSS score0.22%
Transmission of credentials within query parameters in Checkmk <= 2.1.0p26, <= 2.0.0p35, and <= 2.2.0b6 (beta) may cause the automation user's secret to be written to the site Apache access log.CVE-2023-31209checkmk gmbhcheckmk+3EPSS score1.13%
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.CVE-2023-22294ubuntucheck-mk+2EPSS score0.68%
Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions.CVE-2023-22309ubuntucheck-mk+1EPSS score0.41%
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.CVE-2023-22348checkmk gmbhcheckmk+3EPSS score0.59%
Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.CVE-2023-22307ubuntucheck-mk+1EPSS score0.22%
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.CVE-2023-22359checkmkcheckmk+2EPSS score0.50%
User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.CVE-2023-22318ubuntucheck-mk+1EPSS score0.54%
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.CVE-2023-22288checkmkcheckmk+2EPSS score0.40%
HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into EmailsCVE-2023-6735checkmk gmbhcheckmk+3EPSS score0.28%
Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privilegesCVE-2023-6740checkmk gmbhcheckmk+3EPSS score0.18%
Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privilegesCVE-2023-6287checkmk gmbhcheckmk appliance+2EPSS score0.24%
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.