Lucene search
K

CVE-2025-64999

🗓️ 26 Feb 2026 10:26:00Reported by CheckmkType 
cve
 cve
🔗 web.nvd.nist.gov👁 22 Views🌐 WEB

CVE-2025-64999: XSS in Synthetic Monitoring HTML logs due to improper input handling in Checkmk before 2.4.0p22 and 2.3.0p43.

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2025-64999
26 Feb 202610:26
attackerkb
Circl
CVE-2025-64999
26 Feb 202613:18
circl
CNNVD
Checkmk 安全漏洞
26 Feb 202600:00
cnnvd
Cvelist
CVE-2025-64999 Cross-site scripting in HTML logs of Synthetic Monitoring test services
26 Feb 202610:26
cvelist
EUVD
EUVD-2025-208119
26 Feb 202612:30
euvd
NVD
CVE-2025-64999
26 Feb 202611:16
nvd
OSV
UBUNTU-CVE-2025-64999
26 Feb 202611:16
osv
Packet Storm
📄 Checkmk 2.4.0p21 Cross Site Scripting
2 Mar 202600:00
packetstorm
Positive Technologies
PT-2026-22137
26 Feb 202600:00
ptsecurity
RedhatCVE
CVE-2025-64999
27 Feb 202619:44
redhatcve
Rows per page
NVD
CNA
Node
checkmkcheckmkMatch2.3.0-
OR
checkmkcheckmkMatch2.3.0b1
OR
checkmkcheckmkMatch2.3.0b2
OR
checkmkcheckmkMatch2.3.0b3
OR
checkmkcheckmkMatch2.3.0b4
OR
checkmkcheckmkMatch2.3.0b5
OR
checkmkcheckmkMatch2.3.0b6
OR
checkmkcheckmkMatch2.3.0p1
OR
checkmkcheckmkMatch2.3.0p10
OR
checkmkcheckmkMatch2.3.0p11
OR
checkmkcheckmkMatch2.3.0p12
OR
checkmkcheckmkMatch2.3.0p13
OR
checkmkcheckmkMatch2.3.0p14
OR
checkmkcheckmkMatch2.3.0p15
OR
checkmkcheckmkMatch2.3.0p16
OR
checkmkcheckmkMatch2.3.0p17
OR
checkmkcheckmkMatch2.3.0p18
OR
checkmkcheckmkMatch2.3.0p19
OR
checkmkcheckmkMatch2.3.0p2
OR
checkmkcheckmkMatch2.3.0p20
OR
checkmkcheckmkMatch2.3.0p21
OR
checkmkcheckmkMatch2.3.0p22
OR
checkmkcheckmkMatch2.3.0p23
OR
checkmkcheckmkMatch2.3.0p24
OR
checkmkcheckmkMatch2.3.0p25
OR
checkmkcheckmkMatch2.3.0p26
OR
checkmkcheckmkMatch2.3.0p27
OR
checkmkcheckmkMatch2.3.0p28
OR
checkmkcheckmkMatch2.3.0p29
OR
checkmkcheckmkMatch2.3.0p3
OR
checkmkcheckmkMatch2.3.0p30
OR
checkmkcheckmkMatch2.3.0p31
OR
checkmkcheckmkMatch2.3.0p32
OR
checkmkcheckmkMatch2.3.0p33
OR
checkmkcheckmkMatch2.3.0p34
OR
checkmkcheckmkMatch2.3.0p35
OR
checkmkcheckmkMatch2.3.0p36
OR
checkmkcheckmkMatch2.3.0p37
OR
checkmkcheckmkMatch2.3.0p38
OR
checkmkcheckmkMatch2.3.0p39
OR
checkmkcheckmkMatch2.3.0p4
OR
checkmkcheckmkMatch2.3.0p40
OR
checkmkcheckmkMatch2.3.0p41
OR
checkmkcheckmkMatch2.3.0p42
OR
checkmkcheckmkMatch2.3.0p5
OR
checkmkcheckmkMatch2.3.0p6
OR
checkmkcheckmkMatch2.3.0p7
OR
checkmkcheckmkMatch2.3.0p8
OR
checkmkcheckmkMatch2.3.0p9
OR
checkmkcheckmkMatch2.4.0-
OR
checkmkcheckmkMatch2.4.0b1
OR
checkmkcheckmkMatch2.4.0b2
OR
checkmkcheckmkMatch2.4.0b3
OR
checkmkcheckmkMatch2.4.0b4
OR
checkmkcheckmkMatch2.4.0b5
OR
checkmkcheckmkMatch2.4.0b6
OR
checkmkcheckmkMatch2.4.0p1
OR
checkmkcheckmkMatch2.4.0p10
OR
checkmkcheckmkMatch2.4.0p11
OR
checkmkcheckmkMatch2.4.0p12
OR
checkmkcheckmkMatch2.4.0p13
OR
checkmkcheckmkMatch2.4.0p14
OR
checkmkcheckmkMatch2.4.0p15
OR
checkmkcheckmkMatch2.4.0p16
OR
checkmkcheckmkMatch2.4.0p17
OR
checkmkcheckmkMatch2.4.0p18
OR
checkmkcheckmkMatch2.4.0p19
OR
checkmkcheckmkMatch2.4.0p2
OR
checkmkcheckmkMatch2.4.0p20
OR
checkmkcheckmkMatch2.4.0p21
OR
checkmkcheckmkMatch2.4.0p3
OR
checkmkcheckmkMatch2.4.0p4
OR
checkmkcheckmkMatch2.4.0p5
OR
checkmkcheckmkMatch2.4.0p6
OR
checkmkcheckmkMatch2.4.0p7
OR
checkmkcheckmkMatch2.4.0p8
OR
checkmkcheckmkMatch2.4.0p9
[
  {
    "defaultStatus": "unaffected",
    "product": "Checkmk",
    "vendor": "Checkmk GmbH",
    "versions": [
      {
        "lessThan": "2.4.0p22",
        "status": "affected",
        "version": "2.4.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2.3.0p43",
        "status": "affected",
        "version": "2.3.0",
        "versionType": "semver"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
sitequery param/<SITE>/check_mk/robotmk_suite_report.py?site=<SITE>&host=<TARGET_HOST>&service=<SERVICE_NAME>&log_type=okStored XSS via Synthetic Monitoring Logs in Checkmk using robotmk_suite_report.py, injectable through log_type parameter.CWE-79
hostquery param/<SITE>/check_mk/robotmk_suite_report.py?site=<SITE>&host=<TARGET_HOST>&service=<SERVICE_NAME>&log_type=okStored XSS via Synthetic Monitoring Logs in Checkmk using robotmk_suite_report.py, injectable through log_type parameter.CWE-79
servicequery param/<SITE>/check_mk/robotmk_suite_report.py?site=<SITE>&host=<TARGET_HOST>&service=<SERVICE_NAME>&log_type=okStored XSS via Synthetic Monitoring Logs in Checkmk using robotmk_suite_report.py, injectable through log_type parameter.CWE-79
log_typequery param/<SITE>/check_mk/robotmk_suite_report.py?site=<SITE>&host=<TARGET_HOST>&service=<SERVICE_NAME>&log_type=okStored XSS via Synthetic Monitoring Logs in Checkmk using robotmk_suite_report.py, injectable through log_type parameter.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:55Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.15.4
CVSS 47.3
EPSS0.00141
SSVC
22