GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-24565 (GCVE-0-2022-24565)

Vulnerability from cvelistv5 – Published: 2022-02-22 11:03 – Updated: 2024-08-03 04:13
VLAI
Summary
Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.
Severity
5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE
  • n/a
Assigner
References
URL Tags
https://checkmk.com/werk/13716 x_refsource_MISC
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:13:56.688Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://checkmk.com/werk/13716"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Checkmk \u003c=2.0.0p19 Fixed in 2.0.0p20 and Checkmk \u003c=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-22T11:03:39.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://checkmk.com/werk/13716"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-24565",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Checkmk \u003c=2.0.0p19 Fixed in 2.0.0p20 and Checkmk \u003c=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://checkmk.com/werk/13716",
              "refsource": "MISC",
              "url": "https://checkmk.com/werk/13716"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-24565",
    "datePublished": "2022-02-22T11:03:39.000Z",
    "dateReserved": "2022-02-07T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:13:56.688Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-24565",
      "date": "2026-09-18",
      "epss": "0.00632",
      "percentile": "0.48816"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*",
                  "matchCriteriaId": "5D63367A-3B90-462E-B6AD-1CB5721FD45E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*",
                  "matchCriteriaId": "E5E2E954-B3C3-4CC0-B2C8-0E2BEEC93016",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*",
                  "matchCriteriaId": "1638594A-84F1-44F6-BB30-D4CC73ECDA38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*",
                  "matchCriteriaId": "7B2757BF-E3B7-487A-8929-0208D3B0D3CE",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*",
                  "matchCriteriaId": "F01E79D2-EFA4-4A7E-A286-3E86F52B429D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*",
                  "matchCriteriaId": "D12A6070-0542-4293-AE13-85D4E81E1672",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*",
                  "matchCriteriaId": "6AF633FE-DE7C-4548-9ED2-880E915FC33C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*",
                  "matchCriteriaId": "F15190EF-E3F5-4AD1-B748-C0E63C8CB741",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*",
                  "matchCriteriaId": "30F84B89-7EC6-44E6-A164-4C170379D55C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*",
                  "matchCriteriaId": "DDA94D2F-F27C-4DF6-84AE-8ED1BBC7F61E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*",
                  "matchCriteriaId": "71CF8EFD-17F6-4D9A-961A-4B949A6C8B61",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*",
                  "matchCriteriaId": "B04DC2A8-CF05-4FB2-AE2F-AE07943B998D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*",
                  "matchCriteriaId": "1F3BECA6-983C-436E-A635-4E1FB9080E56",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*",
                  "matchCriteriaId": "51A9A2B4-3693-490A-94E2-64E1DB795646",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*",
                  "matchCriteriaId": "C14AB385-8A9F-46FA-A1C5-4A4A45C1B7F5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*",
                  "matchCriteriaId": "EC41CC5F-F088-4E65-B076-35665F0F6C7E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*",
                  "matchCriteriaId": "EC636B76-B050-4B73-A524-21862B020797",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*",
                  "matchCriteriaId": "D49B1D63-8FDD-45FD-99F0-AA9E4FBCCB00",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*",
                  "matchCriteriaId": "8AFA4AF4-8395-4BBB-BA78-7116AC1DCDE7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*",
                  "matchCriteriaId": "5565C1C5-5C23-4449-AB87-49A304382387",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*",
                  "matchCriteriaId": "78320525-F346-4419-81E3-4A47BD17C808",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*",
                  "matchCriteriaId": "EA91018D-DA38-4026-9F47-383F16C85031",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*",
                  "matchCriteriaId": "E8DBEF67-A9AE-46D5-89D0-076CDB1AA06A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*",
                  "matchCriteriaId": "63E87316-1CB2-4CF4-B379-4284C8C39053",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*",
                  "matchCriteriaId": "75925C19-FBF4-4908-B8AD-E19E13B665DB",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*",
                  "matchCriteriaId": "66FC7193-674F-42AA-8064-93786B5474C1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
                  "matchCriteriaId": "F8EDFDCA-0778-4540-B1D5-D3A986258028",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
                  "matchCriteriaId": "54031390-D7E7-4A14-AA2F-923768B3685F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
                  "matchCriteriaId": "F1B7E35F-5A07-424E-AA09-AC54104D612B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
                  "matchCriteriaId": "8D4AC302-C8F5-4A2B-A73A-982D0AA2495A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
                  "matchCriteriaId": "7A058C71-C39E-4109-B570-4A061013D033",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
                  "matchCriteriaId": "22BCFA79-B3D6-4FFF-A3D3-8C4C97AF17C5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
                  "matchCriteriaId": "2A1703D9-8EEB-432D-90E2-F847CDC4C204",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
                  "matchCriteriaId": "1A4C72BA-6D78-4911-83E4-4DABB2CAC47F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
                  "matchCriteriaId": "081FD127-1066-4019-B521-9FADB85DBD4A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
                  "matchCriteriaId": "C1A4F005-4823-4B2B-B4EF-4EFDB04CFB9B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
                  "matchCriteriaId": "357240B1-F0DA-4FA8-B782-D998951F4B54",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
                  "matchCriteriaId": "2F828F54-04E2-4B98-91A7-B09ED833E88B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
                  "matchCriteriaId": "A4B8B300-8264-40AB-A839-7EACB988163B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
                  "matchCriteriaId": "EB76A8DF-C870-482F-A488-DB2917ABD971",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
                  "matchCriteriaId": "04947B1B-CF67-4C11-8FE3-6C17FD35E2EF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
                  "matchCriteriaId": "591AEC3C-2F48-4E91-9881-42EEDD039C5D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
                  "matchCriteriaId": "C5CA04C8-2C80-4C7E-B329-3FFCBEDEE663",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
                  "matchCriteriaId": "47A1C5AC-C8B7-495A-A5F4-CD4790358A2E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
                  "matchCriteriaId": "B87D8B46-5B04-460D-BBA1-BB19234DA19D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
                  "matchCriteriaId": "C59EA30A-0B7D-4E58-A503-8C2F16B45004",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
                  "matchCriteriaId": "F2849E4C-09D1-48A5-B28E-F7A4CD3E8967",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Checkmk \u003c=2.0.0p19 Fixed in 2.0.0p20 and Checkmk \u003c=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications."
        },
        {
          "lang": "es",
          "value": "Checkmk versiones anteriores a 2.0.0p19 incluy\u00e9ndola, Corregido en versi\u00f3n 2.0.0p20 y Checkmk versiones anteriores a 1.6.0p27 incluy\u00e9ndola, Corregido en versi\u00f3n 1.6.0p28, est\u00e1n afectados por una vulnerabilidad de tipo Cross Site Scripting (XSS). El Alias de un sitio no se escapaba correctamente cuando era mostrado como condici\u00f3n para las notificaciones"
        }
      ],
      "id": "CVE-2022-24565",
      "lastModified": "2024-11-21T06:50:40.030",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "LOW",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "SINGLE",
              "availabilityImpact": "NONE",
              "baseScore": 3.5,
              "confidentialityImpact": "NONE",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
              "version": "2.0"
            },
            "exploitabilityScore": 6.8,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": true
          }
        ],
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            },
            "exploitabilityScore": 2.3,
            "impactScore": 2.7,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2022-02-24T15:15:29.513",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://checkmk.com/werk/13716"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://checkmk.com/werk/13716"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-79"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cve@mitre.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "5D63367A-3B90-462E-B6AD-1CB5721FD45E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*",
                    "matchCriteriaId": "E5E2E954-B3C3-4CC0-B2C8-0E2BEEC93016",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*",
                    "matchCriteriaId": "1638594A-84F1-44F6-BB30-D4CC73ECDA38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*",
                    "matchCriteriaId": "7B2757BF-E3B7-487A-8929-0208D3B0D3CE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*",
                    "matchCriteriaId": "F01E79D2-EFA4-4A7E-A286-3E86F52B429D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*",
                    "matchCriteriaId": "D12A6070-0542-4293-AE13-85D4E81E1672",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*",
                    "matchCriteriaId": "6AF633FE-DE7C-4548-9ED2-880E915FC33C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*",
                    "matchCriteriaId": "F15190EF-E3F5-4AD1-B748-C0E63C8CB741",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*",
                    "matchCriteriaId": "30F84B89-7EC6-44E6-A164-4C170379D55C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*",
                    "matchCriteriaId": "DDA94D2F-F27C-4DF6-84AE-8ED1BBC7F61E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*",
                    "matchCriteriaId": "71CF8EFD-17F6-4D9A-961A-4B949A6C8B61",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*",
                    "matchCriteriaId": "B04DC2A8-CF05-4FB2-AE2F-AE07943B998D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*",
                    "matchCriteriaId": "1F3BECA6-983C-436E-A635-4E1FB9080E56",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*",
                    "matchCriteriaId": "51A9A2B4-3693-490A-94E2-64E1DB795646",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*",
                    "matchCriteriaId": "C14AB385-8A9F-46FA-A1C5-4A4A45C1B7F5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*",
                    "matchCriteriaId": "EC41CC5F-F088-4E65-B076-35665F0F6C7E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*",
                    "matchCriteriaId": "EC636B76-B050-4B73-A524-21862B020797",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*",
                    "matchCriteriaId": "D49B1D63-8FDD-45FD-99F0-AA9E4FBCCB00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*",
                    "matchCriteriaId": "8AFA4AF4-8395-4BBB-BA78-7116AC1DCDE7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*",
                    "matchCriteriaId": "5565C1C5-5C23-4449-AB87-49A304382387",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*",
                    "matchCriteriaId": "78320525-F346-4419-81E3-4A47BD17C808",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*",
                    "matchCriteriaId": "EA91018D-DA38-4026-9F47-383F16C85031",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*",
                    "matchCriteriaId": "E8DBEF67-A9AE-46D5-89D0-076CDB1AA06A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*",
                    "matchCriteriaId": "63E87316-1CB2-4CF4-B379-4284C8C39053",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*",
                    "matchCriteriaId": "75925C19-FBF4-4908-B8AD-E19E13B665DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*",
                    "matchCriteriaId": "66FC7193-674F-42AA-8064-93786B5474C1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "F8EDFDCA-0778-4540-B1D5-D3A986258028",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
                    "matchCriteriaId": "54031390-D7E7-4A14-AA2F-923768B3685F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
                    "matchCriteriaId": "F1B7E35F-5A07-424E-AA09-AC54104D612B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
                    "matchCriteriaId": "8D4AC302-C8F5-4A2B-A73A-982D0AA2495A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
                    "matchCriteriaId": "7A058C71-C39E-4109-B570-4A061013D033",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
                    "matchCriteriaId": "22BCFA79-B3D6-4FFF-A3D3-8C4C97AF17C5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
                    "matchCriteriaId": "2A1703D9-8EEB-432D-90E2-F847CDC4C204",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
                    "matchCriteriaId": "1A4C72BA-6D78-4911-83E4-4DABB2CAC47F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
                    "matchCriteriaId": "081FD127-1066-4019-B521-9FADB85DBD4A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
                    "matchCriteriaId": "C1A4F005-4823-4B2B-B4EF-4EFDB04CFB9B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
                    "matchCriteriaId": "357240B1-F0DA-4FA8-B782-D998951F4B54",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
                    "matchCriteriaId": "2F828F54-04E2-4B98-91A7-B09ED833E88B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
                    "matchCriteriaId": "A4B8B300-8264-40AB-A839-7EACB988163B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
                    "matchCriteriaId": "EB76A8DF-C870-482F-A488-DB2917ABD971",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
                    "matchCriteriaId": "04947B1B-CF67-4C11-8FE3-6C17FD35E2EF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
                    "matchCriteriaId": "591AEC3C-2F48-4E91-9881-42EEDD039C5D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
                    "matchCriteriaId": "C5CA04C8-2C80-4C7E-B329-3FFCBEDEE663",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
                    "matchCriteriaId": "47A1C5AC-C8B7-495A-A5F4-CD4790358A2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
                    "matchCriteriaId": "B87D8B46-5B04-460D-BBA1-BB19234DA19D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
                    "matchCriteriaId": "C59EA30A-0B7D-4E58-A503-8C2F16B45004",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
                    "matchCriteriaId": "F2849E4C-09D1-48A5-B28E-F7A4CD3E8967",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Checkmk \u003c=2.0.0p19 Fixed in 2.0.0p20 and Checkmk \u003c=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications."
          },
          {
            "lang": "es",
            "value": "Checkmk versiones anteriores a 2.0.0p19 incluy\u00e9ndola, Corregido en versi\u00f3n 2.0.0p20 y Checkmk versiones anteriores a 1.6.0p27 incluy\u00e9ndola, Corregido en versi\u00f3n 1.6.0p28, est\u00e1n afectados por una vulnerabilidad de tipo Cross Site Scripting (XSS). El Alias de un sitio no se escapaba correctamente cuando era mostrado como condici\u00f3n para las notificaciones"
          }
        ],
        "id": "CVE-2022-24565",
        "lastModified": "2026-06-17T04:32:07.053",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "NONE",
                "baseScore": 3.5,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 6.8,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.3,
              "impactScore": 2.7,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2022-02-24T15:15:29.513",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://checkmk.com/werk/13716"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://checkmk.com/werk/13716"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-79"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-03-27T12:44:25+00:00",
      "cve": "CVE-2022-24565",
      "id": "CVE-2022-24565",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2022-24565",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-24565.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.