Known vulnerabilities in Checkmk

Software: Checkmk
Software CPE: cpe:2.3:a:tribe29:checkmk:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Checkmk Checkmk is affected by 13 known vulnerabilities: 3 medium, 10 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65670 - Incorrect Default Permissions
CVE-2022-33912
CWE-276 Low
No
No
1.6.0 p29, 2.0.0 p26, 2.1.0 p3 21.07.2022 SB2022072136
#VU65669 - Incorrect Default Permissions
CVE-2021-40904
CWE-276 Low
No
No
1.6.0 21.07.2022 SB2022072134
#VU65668 - Unrestricted Upload of File with Dangerous Type
CVE-2021-40905
CWE-434 Low
No
No
2.0.0 p18 21.07.2022 SB2022072132
#VU65667 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24566
CWE-79 Low
No
No
1.6.0 p28, 2.0.0 p20 21.07.2022 SB2022072135
#VU65666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24564
CWE-79 Low
No
No
2.0.0 p20 21.07.2022 SB2022072135
#VU65665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28919
CWE-79 Medium
No
No
1.6.0 p19 21.07.2022 SB2022072133
#VU65575 - Incorrect Default Permissions
CVE-2020-24908
CWE-276 Low
No
No
1.6.0 p17 20.07.2022 SB2021021910
#VU65569 - UNIX Symbolic Link (Symlink) Following
CVE-2022-31258
CWE-61 Low
No
No
1.6.0 p29, 2.0.0 p25, 2.1.0 p1 20.07.2022 SB20220720119
#VU65567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24565
CWE-79 Low
No
No
1.6.0 p28, 2.0.0 p20 20.07.2022 SB20220720118
SB2022072120
#VU65566 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-40906
CWE-79 Low
No
No
1.6.0 p26 20.07.2022 SB20220720117
SB2022072120
#VU65565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36563
CWE-79 Medium
No
No
- 20.07.2022 SB2021072632
SB2022072120
#VU65564 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-9781
CWE-79 Medium
No
No
1.4.0 p6 20.07.2022 SB2017062124
SB2022072120
#VU65563 - Error Handling
CVE-2017-14955
CWE-388 Low
Available
No
1.2.8 p27 20.07.2022 SB2017100233
SB2022072120
SB2017100617
and 4 more