high8.4
CVE-2025-39663
Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service output…
Impact
Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central site. Affecting Checkmk before 2.4.0p14, 2.3.0p39, 2.2.0 and 2.1.0 (eol).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkmk | Checkmk | from 2.0.0 before 2.3.0 Versions 2.3.0, 2.4.0 |