Approved changes feed: RSS · Atom
cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Checkmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c) |
|---|---|
| Product | Checkmk (d6ac166c-ac22-5bed-9805-e6ff22774734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tribe29/checkmk |
purl2cpe | 2026-06-01 10:16:57.741642 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14452 |
vulnerable | 2026-11-03 10:16:32.390900 |
Open redirect and XSS via reset_url parameter
Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script in the session of an authenticated user with Setup access, or to redirect that user to an arbitrary external site, by tricking the user into opening a crafted URL and clicking the Reset button or submitting an empty search.
Published: 2026-10-16T09:51:30.453Z
Updated: 2026-10-16T10:40:17.160Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-113461 |
vulnerable | 2026-11-03 10:16:27.717613 |
mk-oracle: Local privilege escalation via insecure Oracle Home library loading
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.
Published: 2026-10-21T18:11:34.774Z
Updated: 2026-10-23T11:06:22.616Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-117611 |
vulnerable | 2026-11-03 10:15:33.524859 |
Trust of compromised eMudhra root CA in bundled CA stores
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
Published: 2026-10-29T09:32:57.964Z
Updated: 2026-10-29T14:13:09.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92882 |
vulnerable | 2026-10-13 12:28:53.791774 |
Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses
Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases and IPMI passwords in clear text from GET responses, although the setup GUI never displays these values.
Published: 2026-09-22T10:42:59.432Z
Updated: 2026-10-05T14:14:15.352Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90990 |
vulnerable | 2026-10-13 12:28:51.209881 |
Livestatus injection via monitoring filter values
Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services outside their contact groups and occupying web server and Livestatus workers for an attacker-controlled duration.
Published: 2026-09-22T10:43:28.959Z
Updated: 2026-09-22T13:04:48.692Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77021 |
vulnerable | 2026-10-13 12:28:29.600864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15227 |
vulnerable | 2026-09-16 04:33:06.156479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9549 |
vulnerable | 2026-07-29 01:09:07.160629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8833 |
vulnerable | 2026-07-29 01:09:06.307901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8593 |
vulnerable | 2026-07-29 01:09:06.000673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8078 |
vulnerable | 2026-07-29 01:09:05.520738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7765 |
vulnerable | 2026-07-29 01:09:05.219484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7186 |
vulnerable | 2026-07-29 01:09:04.276870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14852 |
vulnerable | 2026-07-29 00:26:17.610569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3466 |
vulnerable | 2026-06-08 08:01:18.728355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3103 |
vulnerable | 2026-06-08 08:01:17.757292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33457 |
vulnerable | 2026-06-08 07:59:10.048396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33456 |
vulnerable | 2026-06-08 07:59:10.016493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33455 |
vulnerable | 2026-06-08 07:59:10.012192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33276 |
vulnerable | 2026-06-08 07:59:09.464362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2859 |
vulnerable | 2026-06-08 07:55:17.615319 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24097 |
vulnerable | 2026-06-08 07:51:17.031776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24096 |
vulnerable | 2026-06-08 07:51:17.001235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24095 |
vulnerable | 2026-06-08 07:51:16.999580 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20915 |
vulnerable | 2026-06-08 07:49:13.409972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65000 |
vulnerable | 2026-06-08 07:39:20.589449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64999 |
vulnerable | 2026-06-08 07:39:20.579139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64998 |
vulnerable | 2026-06-08 07:39:20.509777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64997 |
vulnerable | 2026-06-08 07:39:20.495149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64996 |
vulnerable | 2026-06-08 07:39:20.427816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58122 |
vulnerable | 2026-06-08 07:35:17.263141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58121 |
vulnerable | 2026-06-08 07:35:17.230313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3506 |
vulnerable | 2026-06-08 07:23:09.008374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-39666 |
vulnerable | 2026-06-08 07:23:06.954822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-39664 |
vulnerable | 2026-06-08 07:23:06.896389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-39663 |
vulnerable | 2026-06-08 07:23:06.835535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32919 |
vulnerable | 2026-06-08 07:19:01.152647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32916 |
vulnerable | 2026-06-08 07:19:01.081835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2596 |
vulnerable | 2026-06-08 07:16:57.634377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2092 |
vulnerable | 2026-06-08 07:14:57.900373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1712 |
vulnerable | 2026-06-08 07:08:37.793004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1075 |
vulnerable | 2026-06-08 07:06:36.755787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8606 |
vulnerable | 2026-06-08 07:00:25.195742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6747 |
vulnerable | 2026-06-08 06:58:20.305836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6572 |
vulnerable | 2026-06-08 06:58:19.878612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6542 |
vulnerable | 2026-06-08 06:58:19.736479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6163 |
vulnerable | 2026-06-08 06:58:18.009799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6052 |
vulnerable | 2026-06-08 06:58:17.447540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5741 |
vulnerable | 2026-06-08 06:56:17.148521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47091 |
vulnerable | 2026-06-08 06:48:11.280820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3367 |
vulnerable | 2026-06-08 06:41:53.026075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38865 |
vulnerable | 2026-06-08 06:41:48.439603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38864 |
vulnerable | 2026-06-08 06:41:48.393566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38858 |
vulnerable | 2026-06-08 06:41:48.316240 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38857 |
vulnerable | 2026-06-08 06:41:48.235409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28832 |
vulnerable | 2026-06-08 06:33:27.682090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28831 |
vulnerable | 2026-06-08 06:33:27.678746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28830 |
vulnerable | 2026-06-08 06:33:27.662509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28829 |
vulnerable | 2026-06-08 06:33:27.616813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28828 |
vulnerable | 2026-06-08 06:33:27.570633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28827 |
vulnerable | 2026-06-08 06:33:27.541027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28826 |
vulnerable | 2026-06-08 06:33:27.518546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28825 |
vulnerable | 2026-06-08 06:33:27.495054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28824 |
vulnerable | 2026-06-08 06:33:27.410300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1742 |
vulnerable | 2026-06-08 06:27:14.276540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0670 |
vulnerable | 2026-06-08 06:22:01.687381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0638 |
vulnerable | 2026-06-08 06:22:01.547055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23548 |
vulnerable | 2026-06-08 05:56:02.877722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43440 |
vulnerable | 2026-06-08 05:49:31.878398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31258 |
vulnerable | 2026-06-08 05:43:40.612304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40906 |
vulnerable | 2026-06-08 05:35:19.331727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40904 |
vulnerable | 2026-06-08 05:35:19.311352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36563 |
vulnerable | 2026-06-08 05:32:52.272594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24908 |
vulnerable | 2026-06-08 05:22:35.706748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.