Lucene search
+L

1767 matches found

OSV
OSV
•added 2023/08/10 9:15 a.m.•16 views

UBUNTU-CVE-2023-31209

Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...

8.8CVSS6AI score0.01125EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/10 9:15 a.m.•29 views

Input validation

Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...

6.5CVSS8.7AI score0.01125EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/10 8:14 a.m.•17 views

CVE-2023-31209 Command injection via active checks and REST API

Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...

8.8CVSS7AI score0.01125EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/10 8:14 a.m.•39 views

CVE-2023-31209 Command injection via active checks and REST API

Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...

8.8CVSS9AI score0.01125EPSS
SaveExploits0References1
Mend
Mend
•added 2023/08/10 8:14 a.m.•3 views

CVE-2023-31209

Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...

8.8CVSS0.01125EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/10 8:14 a.m.•78 views

CVE-2023-31209

CVE-2023-31209 affects Checkmk before patch versions: 2.1.0p32, 2.0.0p38, and 2.2.0p4. Improper neutralization of active check command arguments enables arbitrary command execution for authenticated users. CVSS shows network access, low privileges, and high impact across confidentiality, integrit...

8.8CVSS8.8AI score0.01125EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2023/08/10 12:00 a.m.•23 views

Checkmk Injection Vulnerability

Checkmk is an editor. Checkmk suffers from a security vulnerability that stems from a security issue with the parameter ctive check command, which allows an authenticated attacker to execute arbitrary commands...

8.8CVSS7.1AI score0.01125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/10 12:00 a.m.•16 views

PT-2023-23232 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.1.0p32 Checkmk versions prior to 2.0.0p38 Checkmk versions prior to 2.2.0p4 Description: The issue is related to the improper neutralization of active check command arguments, which can lead to arbitrary command...

8.8CVSS7.4AI score0.01125EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/10 12:00 a.m.•5 views

CVE-2023-31209: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...

8.8CVSS8AI score0.01125EPSS
SaveExploits0References3
NVD
NVD
•added 2023/08/01 10:15 a.m.•23 views

CVE-2023-23548

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

6.1CVSS5.7AI score0.00406EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/01 10:15 a.m.•19 views

CVE-2023-23548

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

6.1CVSS6.2AI score
SaveExploits0References1
OSV
OSV
•added 2023/08/01 10:15 a.m.•12 views

UBUNTU-CVE-2023-23548

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

6.1CVSS5.8AI score0.00406EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/08/01 9:42 a.m.•13 views

CVE-2023-23548 XSS in business intelligence

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

5.4CVSS6AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/01 9:42 a.m.•38 views

CVE-2023-23548 XSS in business intelligence

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

5.4CVSS6.1AI score0.00406EPSS
SaveExploits0References1
Mend
Mend
•added 2023/08/01 9:42 a.m.•2 views

CVE-2023-23548

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

6.1CVSS0.00406EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/01 9:42 a.m.•52 views

CVE-2023-23548

CVE-2023-23548 affects Checkmk BI components with a reflected XSS vulnerability in the business intelligence UI. Affected versions are prior to 2.2.0p8, prior to 2.1.0p32, prior to 2.0.0p38, and prior to or equal to 1.6.0p30. The root cause is a reflected XSS flaw in the BI module; no additional ...

6.1CVSS5.6AI score0.00406EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/08/01 12:00 a.m.•15 views

Checkmk Cross-Site Scripting Vulnerability

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from a reflected cross-site scripting XSS vulnerability in business intelligence. Affected products and versions: Checkmk versions prior to 2.2.0p8, 2.1.0p32, 2.0.0p38, 1.6.0p30 and prior...

6.1CVSS5.7AI score0.00406EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/01 12:00 a.m.•13 views

PT-2023-19030 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p8 Checkmk versions prior to 2.1.0p32 Checkmk versions prior to 2.0.0p38 Checkmk versions prior to or equal to 1.6.0p30 Description: The issue is related to a Reflected XSS in the business intelligence component...

6.1CVSS6.2AI score0.00406EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2023/08/01 12:00 a.m.•30 views

CVE-2023-23548

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

6.1CVSS6.3AI score0.00406EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/01 12:00 a.m.•3 views

CVE-2023-23548: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

6.1CVSS6.4AI score0.00406EPSS
SaveExploits0References3
Rows per page
Query Builder