CVE-2021-36563

CVE-2021-36563 – Multiple Stored and Reflected XSS Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 2.0.0p9 Attack type: Stored and Reflected XSS Solution: Update to Software Revision 2.0.0p10 or later Summary: The CheckMK management web console versions 1.5.0 to 2.0.0...

CVE-2021-36563

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

CVE-2021-36563

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

CVE-2021-36563

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

CVE-2021-36563: Improper Neutralization of Input During Web Page Generation

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

PT-2021-21290

Name of the Vulnerable Software and Affected Versions CheckMK management web console versions 1.5.0 through 2.0.0 Description The CheckMK management web console does not sanitise user input in various parameters of the WATO module, allowing an attacker to open a backdoor on the device with HTML...