Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Checkmk — Vulnerabilities & Security Advisories 111

All 111 CVE vulnerabilities found in Checkmk, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations (CWE) associated with the Checkmk product developed by Checkmk GmbH. It aggregates vulnerability data specifically tied to this network monitoring and infrastructure management solution, focusing on security flaws identified within the software ecosystem. The content covers a comprehensive range of vulnerability types, including injection flaws, cross-site scripting issues, and improper access controls, spanning historical releases from early iterations through to recent updates. This timeframe ensures that users can analyze both legacy security gaps and contemporary threats affecting the platform. Here, security professionals and system administrators can effectively track vendor security advisories as they are published by Checkmk. Users can also gain a deeper understanding of specific weakness classes by examining real-world examples within the Checkmk context. Furthermore, the page facilitates the lookup of a product’s vulnerability history, allowing teams to review past incidents and assess the evolution of security postures over time. This resource serves as a centralized reference for evaluating the risk landscape surrounding Checkmk installations. By consolidating these details, it supports informed decision-making regarding patch management and configuration hardening. The aggregation avoids marketing language to provide a factual, technical overview suitable for security audits and compliance reviews. Readers are encouraged to use this information to prioritize remediation efforts based on severity and relevance to their specific deployment environments.

Vendor: Tribe29

CVE ID Title CVSS Severity Published
CVE-2023-31209 Command injection via active checks and REST API CWE-78 8.8 High 2023-08-10
CVE-2023-23548 XSS in business intelligence CWE-80 5.4 Medium 2023-08-01
CVE-2023-22359 User-enumeration in RestAPI CWE-203 4.3 Medium 2023-06-26
CVE-2023-22348 Reading host_configs does not honour contact groups CWE-285 4.3 Medium 2023-05-17
CVE-2023-31208 Livestatus command injection in RestAPI CWE-140 8.3 High 2023-05-17
CVE-2023-31207 Automation user secret logged to Apache access log CWE-532 4.4 Medium 2023-05-02
CVE-2022-46302 Remote Code Execution with Root Privileges via Broad Apache Permissions CWE-829 8.8 High 2023-04-20
CVE-2023-2020 Unauthorized scheduling of downtimes via REST API CWE-280 4.3 Medium 2023-04-18
CVE-2023-1768 Symmetric agent data encryption fails silently CWE-446 3.7 Low 2023-04-04
CVE-2023-22288 Email HTML Injection CWE-138 6.8 Medium 2023-03-20
CVE-2022-48320 CSRF in add-visual endpoint CWE-352 5.4 Medium 2023-02-20
CVE-2022-48319 Host secret disclosed in Checkmk logs CWE-200 6.5 Medium 2023-02-20
CVE-2022-48318 Insecure access control mechanisms for RestAPI documentation CWE-862 5.3 Medium 2023-02-20
CVE-2022-48317 Insecure Termination of RestAPI Session Tokens CWE-613 5.6 Medium 2023-02-20
CVE-2022-48321 SSRF in agent-receiver API CWE-20 6.8 Medium 2023-02-20
CVE-2022-47909 LQL Injection in Livestatus HTTP headers CWE-20 6.8 Medium 2023-02-20
CVE-2022-46836 PHP code injection in watolib CWE-20 9.1 Critical 2023-02-20
CVE-2022-46303 Command injection in SMS notifications CWE-20 8.0 High 2023-02-20
CVE-2022-43440 Privilege escalation via manipulated unixcat executable CWE-427 8.8 High 2023-02-09
CVE-2023-0284 Improper validation of LDAP user IDs CWE-20 6.8 Medium 2023-01-24
CVE-2022-4884 Path-Traversal in MKP storing CWE-22 3.5 Low 2023-01-09

All 111 known CVE vulnerabilities affecting Checkmk with full Chinese analysis, references, and POCs where available.