Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Checkmk — Vulnerabilities & Security Advisories 111

All 111 CVE vulnerabilities found in Checkmk, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations (CWE) associated with the Checkmk product developed by Checkmk GmbH. It aggregates vulnerability data specifically tied to this network monitoring and infrastructure management solution, focusing on security flaws identified within the software ecosystem. The content covers a comprehensive range of vulnerability types, including injection flaws, cross-site scripting issues, and improper access controls, spanning historical releases from early iterations through to recent updates. This timeframe ensures that users can analyze both legacy security gaps and contemporary threats affecting the platform. Here, security professionals and system administrators can effectively track vendor security advisories as they are published by Checkmk. Users can also gain a deeper understanding of specific weakness classes by examining real-world examples within the Checkmk context. Furthermore, the page facilitates the lookup of a product’s vulnerability history, allowing teams to review past incidents and assess the evolution of security postures over time. This resource serves as a centralized reference for evaluating the risk landscape surrounding Checkmk installations. By consolidating these details, it supports informed decision-making regarding patch management and configuration hardening. The aggregation avoids marketing language to provide a factual, technical overview suitable for security audits and compliance reviews. Readers are encouraged to use this information to prioritize remediation efforts based on severity and relevance to their specific deployment environments.

Vendor: Tribe29

CVE ID Title CVSS Severity Published
CVE-2024-38858 Cross-site scripting in Robotmk logs view CWE-79 9.0AI Critical AI 2024-09-02
CVE-2024-38859 XSS in view page with SLA column CWE-80 5.4AI Medium AI 2024-08-26
CVE-2024-28829 Privilege escalation in mk_informix plugin CWE-272 7.8AI High AI 2024-08-20
CVE-2024-6542 Livestatus injection in mknotifyd CWE-140 6.5 Medium 2024-07-22
CVE-2024-28828 1-Click compromize via CSRF CWE-352 8.8 High 2024-07-10
CVE-2024-28827 Privilege escalation in Windows agent CWE-732 8.8 High 2024-07-10
CVE-2024-6163 local IP restriction of internal HTTP endpoints CWE-290 5.3 Medium 2024-07-08
CVE-2024-6052 XSS in SQL check parameters CWE-80 6.5 Medium 2024-07-03
CVE-2024-38857 Reflected links in visuals facilitate phishing attacks CWE-79 4.3 Medium 2024-07-02
CVE-2024-28830 Automation user secrets written to audit log CWE-532 2.7 Low 2024-06-26
CVE-2024-28832 XSS in Crash Report Page CWE-80 4.8 Medium 2024-06-25
CVE-2024-28831 XSS in confirmation pop-up CWE-80 5.4 Medium 2024-06-25
CVE-2024-5741 XSS in inventory view CWE-80 6.5 Medium 2024-06-17
CVE-2024-28833 Missing brute-force protection for two factor authentication CWE-307 5.9 Medium 2024-06-10
CVE-2024-28826 Unrestricted upload and download paths in check_sftp CWE-73 8.8 High 2024-05-29
CVE-2024-28825 Brute-force protection ineffective for some login methods CWE-307 5.9 Medium 2024-04-24
CVE-2024-3367 Argument injection to runmqsc CWE-88 6.5 Medium 2024-04-16
CVE-2024-2380 XSS in graph rendering CWE-80 4.6 Medium 2024-04-05
CVE-2024-28824 Privilege escalation in mk_informix plugin CWE-272 8.8 High 2024-03-22
CVE-2024-1742 Information disclosure in mk_oracle Checkmk agent plugin CWE-214 3.8 Low 2024-03-22
CVE-2024-0638 Privilege escalation in mk_oracle plugins CWE-272 8.2 High 2024-03-22
CVE-2024-0670 Privilege escalation in windows agent CWE-427 8.8 High 2024-03-11
CVE-2023-6740 Privilege escalation in jar_signature CWE-427 8.8 High 2024-01-12
CVE-2023-6735 Privilege escalation in mk_tsm CWE-95 8.8 High 2024-01-12
CVE-2023-31211 Disabled automation users could still authenticate CWE-303 8.8 High 2024-01-12
CVE-2023-31210 Privilege escalation in agent via LD_LIBRARY_PATH CWE-427 8.8 High 2023-12-13
CVE-2023-6251 CSRF in delete_user_message CWE-352 3.5 Low 2023-11-24
CVE-2023-6157 Livestatus injection in ajax_search CWE-140 7.6 High 2023-11-22
CVE-2023-6156 Livestatus injection in availability timeline CWE-140 7.6 High 2023-11-22
CVE-2023-23549 DoS via long hostnames CWE-1284 2.7 Low 2023-11-15

All 111 known CVE vulnerabilities affecting Checkmk with full Chinese analysis, references, and POCs where available.