CVE-2023-23548 XSS in business intelligence

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

CVE-2023-23548 XSS in business intelligence

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

CVE-2023-23548

CVE-2023-23548 affects Checkmk BI components with a reflected XSS vulnerability in the business intelligence UI. Affected versions are prior to 2.2.0p8, prior to 2.1.0p32, prior to 2.0.0p38, and prior to or equal to 1.6.0p30. The root cause is a reflected XSS flaw in the BI module; no additional ...

Checkmk < 2.0.0p38, 2.1.x < 2.1.0p32, 2.2.x < 2.2.0p8 XSS Vulnerability

Checkmk is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; i...

CVE-2023-23548

Reflected XSS in business intelligence in Checkmk 2.2.0p8, 2.1.0p32, 2.0.0p38, =1.6.0p30...

Checkmk Cross-Site Scripting Vulnerability

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from a reflected cross-site scripting XSS vulnerability in business intelligence. Affected products and versions: Checkmk versions prior to 2.2.0p8, 2.1.0p32, 2.0.0p38, 1.6.0p30 and prior...

PT-2023-19030 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p8 Checkmk versions prior to 2.1.0p32 Checkmk versions prior to 2.0.0p38 Checkmk versions prior to or equal to 1.6.0p30 Description: The issue is related to a Reflected XSS in the business intelligence component...

Checkmk < 2.1.0p31, 2.2.x < 2.2.0p5 Information Disclosure Vulnerability

Checkmk is prone to an information disclosure vulnerability in the Requests is a HTTP library as used by the product. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Checkmk 2.2.x < 2.2.0p5 Information Disclosure Vulnerability

Checkmk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

Code injection

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

UBUNTU-CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359 User-enumeration in RestAPI

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359

CVE-2023-22359 describes a user-enumeration issue in Checkmk versions up to 2.2.0p4. The provided documents consistently frame the vulnerability as an authenticated user enumeration of usernames, without detailing specific exploit steps, affected modules, or exploitability in the wild. No concret...

CVE-2023-22359 User-enumeration in RestAPI

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk version 2.2.0p4 and earlier versions, which stems from a vulnerability that allows an authenticated attacker to enumerate usernames...

PT-2023-18454 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p4 Description: The issue allows an authenticated attacker to enumerate usernames through user enumeration. Recommendations: For versions prior to 2.2.0p4, update to a version that contains a fix for this issue...

Checkmk Authorization Issues Vulnerability (CNVD-2023-39427)

Checkmk is an editor. Checkmk GmbH suffers from an authorization issue vulnerability that stems from improper RestAPI authorization, which can be exploited by an authenticated attacker to read arbitrary host configurations...