checkmk 2.0.0 Patch 39
Approved changes feed: RSS · Atom
cpe:2.3:a:checkmk:checkmk:2.0.0:p39:*:*:*:*:*:*
part: a version: 2.0.0 update: p39
| Vendor | Checkmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c) |
|---|---|
| Product | Checkmk (d6ac166c-ac22-5bed-9805-e6ff22774734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tribe29/checkmk |
purl2cpe | 2026-06-01 10:16:57.757878 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6542 |
vulnerable | 2026-06-08 06:58:19.775346 |
Livestatus injection in mknotifyd
MEDIUM (6.5)
Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2.1.0p47, < 2.2.0p32 and < 2.3.0p11 allows arbitrary livestatus command execution.
Published: 2024-07-22T09:50:17.736Z
Updated: 2024-08-01T21:41:03.497Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6251 |
vulnerable | 2026-06-08 06:19:46.763484 |
CSRF in delete_user_message
LOW (3.5)
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
Published: 2023-11-24T08:16:23.663Z
Updated: 2024-08-02T08:21:18.099Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6157 |
vulnerable | 2026-06-08 06:19:46.461510 |
Livestatus injection in ajax_search
HIGH (7.6)
Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Published: 2023-11-22T16:24:22.002Z
Updated: 2024-08-02T08:21:17.625Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6156 |
vulnerable | 2026-06-08 06:19:46.403318 |
Livestatus injection in availability timeline
HIGH (7.6)
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Published: 2023-11-22T16:24:15.515Z
Updated: 2024-08-02T08:21:17.614Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23549 |
vulnerable | 2026-06-08 05:56:02.958914 |
DoS via long hostnames
LOW (2.7)
Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.
Published: 2023-11-15T11:07:28.671Z
Updated: 2024-08-28T20:25:01.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.