Read the docs
TI-2024-26064 Aliases CVE-2024-38858GHSA-jm78-w78g-6wh2

Cross-site scripting in Robotmk logs view

Priority LOW 12CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
Present
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0033 26th percentileScored 2026-11-07
Fix Fixed Checkmk (Checkmk GmbH): 2.3.0p14

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Checkmk GmbHCheckmk2.3.0 to before 2.3.0p142.3.0p14Patch availableCNA
  • Checkmk VendorCheckmk GmbH Affected 2.3.0 to before 2.3.0p14 Fixed in 2.3.0p14 Patch available CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*before 2.3.0VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*2.3.0VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*2.3.0 p1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*2.3.0 p10VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*2.3.0 p11VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*2.3.0 p12VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*2.3.0 p13VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*2.3.0 p2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*2.3.0 p3VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*2.3.0 p4VulnerableCheckmk GmbH
  • cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* Versions before 2.3.0 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:* Versions 2.3.0 p1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:* Versions 2.3.0 p10 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:* Versions 2.3.0 p11 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:* Versions 2.3.0 p12 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:* Versions 2.3.0 p13 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:* Versions 2.3.0 p2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:* Versions 2.3.0 p3 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:* Versions 2.3.0 p4 Vulnerable ·Checkmk GmbH
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*2.3.0 p5VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*2.3.0 p6VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*2.3.0 p7VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*2.3.0 p8VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*2.3.0 p9VulnerableCheckmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:* Versions 2.3.0 p5 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:* Versions 2.3.0 p6 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:* Versions 2.3.0 p7 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:* Versions 2.3.0 p8 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:* Versions 2.3.0 p9 Vulnerable ·Checkmk GmbH

Remediation

  • Fix · CNA Checkmk (Checkmk GmbH) Fixed in 2.3.0p14

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-38858
  2. 2026-10-03 Alias added: GHSA-jm78-w78g-6wh2

References

Advisory 1

  • TI-2025-26345 Cross Site Scripting through compromised remote site CVSS 4.0HIGH 8.5
  • TI-2025-40190 Cross-site scripting in HTML logs of Synthetic Monitoring test services CVSS 4.0HIGH 7.3
  • TI-2024-19037 Brute-force protection ineffective for some login methods CVSS 3.1CRITICAL 9.8
  • TI-2024-05712 local IP restriction of internal HTTP endpoints CVSS 3.1CRITICAL 9.8
  • TI-2021-17818 The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does… CVSS 3.1HIGH 8.8
  • TI-2021-17817 The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a… CVSS 3.1HIGH 8.8
See all 107 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences