Approved changes feed: RSS · Atom
cpe:2.3:a:checkmk:checkmk:2.0.0:*:*:*:*:*:*:*
part: a version: 2.0.0 update: *
| Vendor | Checkmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c) |
|---|---|
| Product | Checkmk (d6ac166c-ac22-5bed-9805-e6ff22774734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tribe29/checkmk |
purl2cpe | 2026-06-01 10:16:57.757819 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6572 |
vulnerable | 2026-06-08 06:58:19.880202 |
Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'
Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic
Published: 2024-09-09T09:39:17.769Z
Updated: 2024-09-09T13:03:22.065Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3367 |
vulnerable | 2026-06-08 06:41:53.023532 |
Argument injection to runmqsc
MEDIUM (6.5)
Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc
Published: 2024-04-16T11:59:43.845Z
Updated: 2024-08-26T09:48:37.438Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38862 |
vulnerable | 2026-06-08 06:41:48.366092 |
SNMP and IMPI secrets written to audit log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators.
Published: 2024-10-14T07:19:01.674Z
Updated: 2024-10-14T15:34:37.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38859 |
vulnerable | 2026-06-08 06:41:48.324164 |
XSS in view page with SLA column
XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 (EOL) allowed malicious users to execute arbitrary scripts by injecting HTML elements into the SLA column title. These scripts could be executed when the view page was cloned by other users.
Published: 2024-08-26T14:15:32.555Z
Updated: 2024-08-26T15:22:30.830Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28829 |
vulnerable | 2026-06-08 06:33:27.616897 |
Privilege escalation in mk_informix plugin
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 (EOL) allows local users to escalate privileges.
Published: 2024-08-20T09:29:26.474Z
Updated: 2024-08-21T19:37:32.708Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28827 |
vulnerable | 2026-06-08 06:33:27.540776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28826 |
vulnerable | 2026-06-08 06:33:27.518197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28825 |
vulnerable | 2026-06-08 06:33:27.492100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.