Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk:checkmk:2.3.0:p46:*:*:*:*:*:*

part: a version: 2.3.0 update: p46

VendorCheckmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c)
ProductCheckmk (d6ac166c-ac22-5bed-9805-e6ff22774734)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/tribe29/checkmk purl2cpe 2026-07-28 16:41:14.394864

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-33457 vulnerable 2026-06-08 07:59:10.103324 Potential livestatus injection in prediction graph page
Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value.
Published: 2026-04-10T08:31:35.768Z
Updated: 2026-04-14T13:29:41.112Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.