Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Tribe29 — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting Tribe29. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Tribe29 is a software development firm specializing in enterprise-grade cybersecurity solutions, particularly known for its automated security orchestration platforms. The company’s products facilitate threat detection and response by integrating with various security information and event management systems. Historically, the firm’s software has been associated with twenty-one recorded Common Vulnerabilities and Exposures, primarily involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from improper input validation or insufficient access controls within the application’s web interface and API endpoints. While no catastrophic data breaches have been publicly attributed directly to these specific CVEs, the recurring nature of these issues highlights ongoing challenges in maintaining secure codebases for complex automation tools. The company continues to address these technical debt items through regular patching and security updates, aiming to mitigate risks associated with its widely deployed infrastructure management utilities.

Top products by Tribe29: Checkmk Checkmk Appliance
CVE ID Title CVSS Severity Published
CVE-2023-22359 User-enumeration in RestAPI — Checkmk CWE-203 4.3 Medium 2023-06-26
CVE-2023-22318 Denial of service against webconf — Checkmk Appliance CWE-412 7.5 High 2023-05-15
CVE-2023-31207 Automation user secret logged to Apache access log — Checkmk CWE-532 4.4 Medium 2023-05-02
CVE-2022-46302 Remote Code Execution with Root Privileges via Broad Apache Permissions — Checkmk CWE-829 8.8 High 2023-04-20
CVE-2023-22309 Reflected Cross Site Scripting (XSS) — Checkmk Appliance CWE-80 6.1 Medium 2023-04-20
CVE-2023-22294 Privilege escalation in Checkmk Appliance — Checkmk Appliance CWE-732 8.8 High 2023-04-18
CVE-2023-22307 Site-Passwords in GET parameters — Checkmk Appliance CWE-200 5.5 Medium 2023-04-18
CVE-2023-2020 Unauthorized scheduling of downtimes via REST API — Checkmk CWE-280 4.3 Medium 2023-04-18
CVE-2023-1768 Symmetric agent data encryption fails silently — Checkmk CWE-446 3.7 Low 2023-04-04
CVE-2023-22288 Email HTML Injection — Checkmk CWE-138 6.8 Medium 2023-03-20
CVE-2022-48320 CSRF in add-visual endpoint — Checkmk CWE-352 5.4 Medium 2023-02-20
CVE-2022-48319 Host secret disclosed in Checkmk logs — Checkmk CWE-200 6.5 Medium 2023-02-20
CVE-2022-48318 Insecure access control mechanisms for RestAPI documentation — Checkmk CWE-862 5.3 Medium 2023-02-20
CVE-2022-48317 Insecure Termination of RestAPI Session Tokens — Checkmk CWE-613 5.6 Medium 2023-02-20
CVE-2022-48321 SSRF in agent-receiver API — Checkmk CWE-20 6.8 Medium 2023-02-20
CVE-2022-47909 LQL Injection in Livestatus HTTP headers — Checkmk CWE-20 6.8 Medium 2023-02-20
CVE-2022-46836 PHP code injection in watolib — Checkmk CWE-20 9.1 Critical 2023-02-20
CVE-2022-46303 Command injection in SMS notifications — Checkmk CWE-20 8.0 High 2023-02-20
CVE-2022-43440 Privilege escalation via manipulated unixcat executable — Checkmk CWE-427 8.8 High 2023-02-09
CVE-2023-0284 Improper validation of LDAP user IDs — Checkmk CWE-20 6.8 Medium 2023-01-24
CVE-2022-4884 Path-Traversal in MKP storing — Checkmk CWE-22 3.5 Low 2023-01-09

This page lists every published CVE security advisory associated with Tribe29. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.