Lucene search
+L

7 matches found

Kitploit
Kitploit
added 2026/08/28 7:12 a.m.4 views

CVE-2021-40906

CVE-2021-40906 - XSS riflesso in una zona non autenticata Applicazione: CheckMK Management Web Console Versione del software: dalla 1.5.0 alla 1.5.0p25 Autore: Edgar Augusto Loyola Torres. Tipo di attacco: XSS riflesso Soluzione: aggiornare alla revisione 1.6.0p26 o successiva Sommario: Il softwa...

6.1CVSS6.4AI score0.00989EPSS
SaveExploits1
OSV
OSV
added 2022/03/25 11:15 p.m.35 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS5.7AI score
SaveExploits0References1
NVD
NVD
added 2022/03/25 11:15 p.m.37 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS0.00989EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/25 11:15 p.m.26 views

Authentication flaw

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

4.3CVSS5.8AI score0.00989EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/25 11:15 p.m.40 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS6.4AI score0.00989EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/03/25 10:20 p.m.45 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1AI score0.00989EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2021/10/12 9:30 a.m.244 views

Exploit for Cross-site Scripting in Checkmk

CVE-2021-40906 - Reflected XSS in an unauthenticated zone A...

6.1CVSS6.8AI score0.00989EPSS
SaveExploits1
Rows per page
Query Builder