Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Checkmk 2.2.0p46, 2.3.0p38, 2.4.0p13 Clear all filters
TI-2025-26346 CVE-2025-39664 · GHSA-wm22-3ghp-687p

Path-Traversal in report scheduler

Priority LOW 32

Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root d…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0071 Published 2025-10-09 Fixed in 2.4.0p13, 2.3.0p38 +1 CWE-22
TI-2025-23937 CVE-2025-32916 · GHSA-pr6f-5c62-pj5r

Sensitive form data in URL query parameters

Priority LOW 6

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may b…

CVSS 4.0LOW 1.0 Local High privileges User interaction EPSS 0.00192 Published 2025-10-09 Fixed in 2.4.0p13, 2.3.0p38 +1 CWE-598