Lucene search
+L

6 matches found

OSV
OSV
added 2022/03/25 11:15 p.m.33 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS5.7AI score
SaveExploits0References1
NVD
NVD
added 2022/03/25 11:15 p.m.36 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS0.00974EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/25 11:15 p.m.25 views

Authentication flaw

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

4.3CVSS5.8AI score0.00974EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/25 11:15 p.m.38 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS6.4AI score0.00974EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/03/25 10:20 p.m.43 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1AI score0.00974EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2021/10/12 9:30 a.m.242 views

Exploit for Cross-site Scripting in Checkmk

CVE-2021-40906 - Reflected XSS in an unauthenticated zone A...

6.1CVSS6.8AI score0.00974EPSS
SaveExploits1
Rows per page
Query Builder