Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*

part: a version: 2.0.0 update: -

VendorCheckmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c)
ProductCheckmk (d6ac166c-ac22-5bed-9805-e6ff22774734)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/tribe29/checkmk purl2cpe 2026-06-01 10:16:57.757821

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6542 vulnerable 2026-06-08 06:58:19.738618 Livestatus injection in mknotifyd
MEDIUM (6.5)
Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2.1.0p47, < 2.2.0p32 and < 2.3.0p11 allows arbitrary livestatus command execution.
Published: 2024-07-22T09:50:17.736Z
Updated: 2024-08-01T21:41:03.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28828 vulnerable 2026-06-08 06:33:27.571939 1-Click compromize via CSRF
HIGH (8.8)
Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site.
Published: 2024-07-10T12:41:13.934Z
Updated: 2024-08-02T00:56:58.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6251 vulnerable 2026-06-08 06:19:46.760865 CSRF in delete_user_message
LOW (3.5)
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
Published: 2023-11-24T08:16:23.663Z
Updated: 2024-08-02T08:21:18.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6157 vulnerable 2026-06-08 06:19:46.459269 Livestatus injection in ajax_search
HIGH (7.6)
Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Published: 2023-11-22T16:24:22.002Z
Updated: 2024-08-02T08:21:17.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6156 vulnerable 2026-06-08 06:19:46.375103 Livestatus injection in availability timeline
HIGH (7.6)
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Published: 2023-11-22T16:24:15.515Z
Updated: 2024-08-02T08:21:17.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31209 vulnerable 2026-06-08 06:04:42.278149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31208 vulnerable 2026-06-08 06:04:42.256114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31207 vulnerable 2026-06-08 06:04:42.183764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23549 vulnerable 2026-06-08 05:56:02.950704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23548 vulnerable 2026-06-08 05:56:02.878944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22288 vulnerable 2026-06-08 05:54:23.352208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1768 vulnerable 2026-06-08 05:52:36.955023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0284 vulnerable 2026-06-08 05:52:04.674414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4884 vulnerable 2026-06-08 05:52:00.540438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48320 vulnerable 2026-06-08 05:51:34.238631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48319 vulnerable 2026-06-08 05:51:34.186338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48318 vulnerable 2026-06-08 05:51:34.172781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48317 vulnerable 2026-06-08 05:51:34.134012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47909 vulnerable 2026-06-08 05:50:40.956287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46836 vulnerable 2026-06-08 05:50:39.597416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46303 vulnerable 2026-06-08 05:50:38.572873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46302 vulnerable 2026-06-08 05:50:38.531286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43440 vulnerable 2026-06-08 05:49:31.909605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33912 vulnerable 2026-06-08 05:44:51.710470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31258 vulnerable 2026-06-08 05:43:40.634584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24566 vulnerable 2026-06-08 05:41:01.071087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24565 vulnerable 2026-06-08 05:41:01.069278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24564 vulnerable 2026-06-08 05:41:01.039123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40905 vulnerable 2026-06-08 05:35:19.314068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.