Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk:nagvis:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCheckmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c)
ProductNagvis (8f199c15-0b95-5fc6-b742-e834afc9003d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13723 vulnerable 2026-06-08 06:25:38.415441 Checkmk NagVis Remote Code Execution
The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.
Published: 2025-02-04T22:02:19.226Z
Updated: 2025-11-03T19:29:17.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13722 vulnerable 2026-06-08 06:25:38.414982 Checkmk NagVis Reflected Cross-site Scripting
The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated and unauthenticated users.
Published: 2025-02-04T22:04:00.315Z
Updated: 2025-11-03T19:29:15.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.