Lucene search
+L

1482 matches found

CVE
CVE
added 2022/02/23 10:52 a.m.117 views

CVE-2022-24566

CVE-2022-24566 is a Cross-Site Scripting (XSS) vulnerability in Checkmk where the title of a predefined condition is not properly escaped when rendered as a condition. Public reports identify affected versions as Checkmk <= 2.0.0p19 (fixed in 2.0.0p20) and Checkmk

5.4CVSS5.3AI score0.00572EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/23 10:52 a.m.27 views

CVE-2022-24566

In Checkmk =2.0.0p19 fixed in 2.0.0p20 and Checkmk =1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting XSS...

5.6AI score0.00572EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/23 10:52 a.m.26 views

CVE-2022-24566

In Checkmk =2.0.0p19 fixed in 2.0.0p20 and Checkmk =1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting XSS...

5.4CVSS6.5AI score0.00572EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/02/23 12:0 a.m.7 views

PT-2022-16722 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6.0p27 and earlier Checkmk versions 2.0.0p19 and earlier Description: The issue arises from the title of a Predefined condition not being properly escaped when shown as a condition, which can result in Cross Site Scripting...

5.4CVSS6.4AI score0.00572EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/02/23 12:0 a.m.47 views

Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-21231)

Checkmk is an editor. A cross-site scripting vulnerability exists in Checkmk, which stems from Checkmk version = 2.0.0p19. When creating or editing user properties, Help Text is affected by HTML injection, which can be triggered when editing a user. An attacker could use this vulnerability to...

6.1CVSS1.5AI score0.00671EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/02/22 11:3 a.m.24 views

CVE-2022-24565

Checkmk =2.0.0p19 Fixed in 2.0.0p20 and Checkmk =1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting XSS vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications...

5.8AI score0.00632EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/22 11:3 a.m.91 views

CVE-2022-24565

CVE-2022-24565 affects Checkmk: vulnerable in versions <= 2.0.0p19 (fixed in 2.0.0p20) and

5.4CVSS5.3AI score0.00632EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/02/22 11:3 a.m.28 views

CVE-2022-24565

Checkmk =2.0.0p19 Fixed in 2.0.0p20 and Checkmk =1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting XSS vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications...

5.4CVSS5.8AI score0.00632EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/02/22 12:0 a.m.11 views

PT-2022-16721 · Checkmk +1 · Checkmk +1

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6.0p27 and earlier Checkmk versions 2.0.0p19 and earlier Description: The issue is related to a Cross Site Scripting XSS vulnerability. It occurs because the Alias of a site is not properly escaped when shown as a condition...

6.1CVSS5.3AI score0.12134EPSS
SaveExploits9References21
NVD
NVD
added 2022/02/21 11:15 p.m.24 views

CVE-2022-24564

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

6.1CVSS0.00671EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/21 11:15 p.m.6 views

CVE-2022-24564

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

6.1CVSS6.3AI score0.00671EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/21 11:15 p.m.19 views

Cross site scripting

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

4.3CVSS5.9AI score0.00671EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/02/21 11:15 p.m.34 views

CVE-2022-24564

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

6.1CVSS6.3AI score0.00671EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/21 10:14 p.m.115 views

CVE-2022-24564

Affected product: Checkmk. Vulnerability: Cross-Site Scripting (XSS) in the Help Text when creating or editing a user attribute, due to HTML injection in the user attribute editing flow. Root cause: HTML injection in the Help Text field (user attributes). Impact: client-side code execution potent...

6.1CVSS5.9AI score0.00671EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/21 10:14 p.m.26 views

CVE-2022-24564

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

6.1AI score0.00671EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/21 10:14 p.m.28 views

CVE-2022-24564

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

6.1CVSS6.1AI score0.00671EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/02/21 12:0 a.m.7 views

PT-2022-16720 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.0.0p19 and earlier Description: The issue concerns a Cross Site Scripting XSS vulnerability. It occurs when creating or editing a user attribute, where the Help Text is subject to HTML injection. This can be triggered when...

6.1CVSS6.6AI score0.00671EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/21 12:0 a.m.10 views

Checkmk 跨站脚本漏洞

Checkmk is an editor. A cross-site scripting vulnerability exists in Checkmk, which stems from Checkmk version = 2.0.0p19. When creating or editing user properties, Help Text is affected by HTML injection, which can be triggered when editing a user. An attacker could use this vulnerability to...

6.1CVSS5.3AI score0.00671EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/01/17 12:0 a.m.71 views

Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-21235)

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

5.4CVSS3.6AI score0.01078EPSS
SaveExploits1References1
NVD
NVD
added 2022/01/15 5:15 p.m.29 views

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

5.4CVSS0.01078EPSS
SaveExploits1References4
Rows per page
Query Builder