Approved changes feed: RSS · Atom
cpe:2.3:a:tribe29:checkmk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tribe29 (19072b85-cddb-5c42-944d-c6d9fb49c288) |
|---|---|
| Product | Checkmk (ea48f31b-1c0b-5914-b817-86117d0caf33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tribe29/checkmk |
purl2cpe | 2026-06-01 10:12:16.178621 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6740 |
vulnerable | 2026-06-08 06:21:55.548431 |
Privilege escalation in jar_signature
HIGH (8.8)
Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
Published: 2024-01-12T07:50:20.076Z
Updated: 2025-06-03T14:05:24.299Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6735 |
vulnerable | 2026-06-08 06:21:55.524322 |
Privilege escalation in mk_tsm
HIGH (8.8)
Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
Published: 2024-01-12T07:50:05.450Z
Updated: 2025-06-03T14:05:30.852Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31211 |
vulnerable | 2026-06-08 06:04:42.350163 |
Disabled automation users could still authenticate
HIGH (8.8)
Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials
Published: 2024-01-12T07:49:45.294Z
Updated: 2025-06-17T21:09:17.486Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31209 |
vulnerable | 2026-06-08 06:04:42.305925 |
Command injection via active checks and REST API
HIGH (8.8)
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.
Published: 2023-08-10T08:14:12.067Z
Updated: 2024-08-28T20:24:16.728Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31208 |
vulnerable | 2026-06-08 06:04:42.276994 |
Livestatus command injection in RestAPI
HIGH (8.3)
Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.
Published: 2023-05-17T08:24:59.173Z
Updated: 2025-01-21T21:07:58.592Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31207 |
vulnerable | 2026-06-08 06:04:42.182518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2020 |
vulnerable | 2026-06-08 06:02:41.227038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22359 |
vulnerable | 2026-06-08 05:54:24.917783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22348 |
vulnerable | 2026-06-08 05:54:24.706959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22294 |
vulnerable | 2026-06-08 05:54:23.563452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22288 |
vulnerable | 2026-06-08 05:54:23.350905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1768 |
vulnerable | 2026-06-08 05:52:36.924399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0284 |
vulnerable | 2026-06-08 05:52:04.674368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4884 |
vulnerable | 2026-06-08 05:52:00.539679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48321 |
vulnerable | 2026-06-08 05:51:34.251869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48320 |
vulnerable | 2026-06-08 05:51:34.231611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48319 |
vulnerable | 2026-06-08 05:51:34.184378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48318 |
vulnerable | 2026-06-08 05:51:34.158371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48317 |
vulnerable | 2026-06-08 05:51:34.119774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47909 |
vulnerable | 2026-06-08 05:50:40.952366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46836 |
vulnerable | 2026-06-08 05:50:39.596575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46303 |
vulnerable | 2026-06-08 05:50:38.566780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46302 |
vulnerable | 2026-06-08 05:50:38.506340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43440 |
vulnerable | 2026-06-08 05:49:31.877192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40905 |
vulnerable | 2026-06-08 05:35:19.312826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.