Vendor
Tribe29
33 known vulnerabilities in products by Tribe29, 0 of them actively exploited (CISA KEV).
Key figures
33
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-40905 | Checkmk: Remote Code Execution | 8.8 | |
| Medium | CVE-2023-6237 | Excessive time spent checking invalid RSA public keys | 5.9 | |
| Critical | CVE-2022-46836 | PHP code injection in watolib | 9.1 | |
| High | CVE-2023-31209 | Command injection via active checks and REST API | 8.8 | |
| High | CVE-2023-31208 | Livestatus command injection in RestAPI | 8.8 | |
| High | CVE-2022-46303 | Command injection in SMS notifications | 8.0 | |
| High | CVE-2023-22294 | Privilege escalation in Checkmk Appliance | 8.8 | |
| High | CVE-2023-0284 | Improper validation of LDAP user IDs | 6.8 | |
| High | CVE-2023-31211 | Disabled automation users could still authenticate | 8.8 | |
| Medium | CVE-2021-40906 | Checkmk: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2023-22318 | Denial of service against webconf | 7.5 | |
| High | CVE-2022-46302 | Remote Code Execution with Root Privileges via Broad Apache Permissions | 8.8 | |
| High | CVE-2023-6735 | Privilege escalation in mk_tsm | 8.8 | |
| High | CVE-2022-31258 | Checkmk: security vulnerability | 8.2 | |
| Medium | CVE-2023-1768 | Symmetric agent data encryption fails silently | 3.7 | |
| High | CVE-2023-6740 | Privilege escalation in jar_signature | 8.8 | |
| High | CVE-2022-43440 | Privilege escalation via manipulated unixcat executable | 8.8 | |
| Medium | CVE-2023-22288 | Email HTML Injection | 6.8 | |
| High | CVE-2022-47909 | LQL Injection in Livestatus HTTP headers | 6.8 | |
| Medium | CVE-2023-22348 | Reading host_configs does not honour contact groups | 4.3 | |
| Medium | CVE-2023-22309 | Reflected Cross Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2022-48317 | Insecure Termination of RestAPI Session Tokens | 5.6 | |
| Medium | CVE-2022-48318 | Insecure access control mechanisms for RestAPI documentation | 5.3 | |
| High | CVE-2022-33912 | Checkmk: Privilege Escalation | 7.8 | |
| Medium | CVE-2022-48321 | SSRF in agent-receiver API | 6.8 |
Products
| Tribe29 Checkmk | 29 | 0 |
| Checkmk Appliance | 4 | 0 |
| Checkmk Appliance Firmware | 4 | 0 |