CVE-2026-20915 in Checkmkالمعلومات

الملخص

بحسب MITRE • 31/03/2026

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other users viewing the sidebar.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Checkmk

حجز

23/03/2026

إفشاء

31/03/2026

الاعتدال

تمت الموافقة

إدخال

VDB-354409

EPSS

0.00032

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to know what is going to be exploited?

We predict KEV entries!