Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.
{
"cpe": [
"cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*"
],
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "1.6.0-NA"
},
{
"last_affected": "1.6.0-b1"
},
{
"last_affected": "1.6.0-b10"
},
{
"last_affected": "1.6.0-b12"
},
{
"last_affected": "1.6.0-b3"
},
{
"last_affected": "1.6.0-b4"
},
{
"last_affected": "1.6.0-b5"
},
{
"last_affected": "1.6.0-b9"
},
{
"last_affected": "1.6.0-p1"
},
{
"last_affected": "1.6.0-p10"
},
{
"last_affected": "1.6.0-p11"
},
{
"last_affected": "1.6.0-p12"
},
{
"last_affected": "1.6.0-p13"
},
{
"last_affected": "1.6.0-p14"
},
{
"last_affected": "1.6.0-p15"
},
{
"last_affected": "1.6.0-p16"
},
{
"last_affected": "1.6.0-p19"
},
{
"last_affected": "1.6.0-p2"
},
{
"last_affected": "1.6.0-p20"
},
{
"last_affected": "1.6.0-p21"
},
{
"last_affected": "1.6.0-p22"
},
{
"last_affected": "1.6.0-p23"
},
{
"last_affected": "1.6.0-p24"
},
{
"last_affected": "1.6.0-p25"
},
{
"last_affected": "1.6.0-p26"
},
{
"last_affected": "1.6.0-p27"
},
{
"last_affected": "2.0.0-NA"
},
{
"last_affected": "2.0.0-b1"
},
{
"last_affected": "2.0.0-b2"
},
{
"last_affected": "2.0.0-b3"
},
{
"last_affected": "2.0.0-b4"
},
{
"last_affected": "2.0.0-b5"
},
{
"last_affected": "2.0.0-b6"
},
{
"last_affected": "2.0.0-b7"
},
{
"last_affected": "2.0.0-b8"
},
{
"last_affected": "2.0.0-i1"
},
{
"last_affected": "2.0.0-p1"
},
{
"last_affected": "2.0.0-p10"
},
{
"last_affected": "2.0.0-p11"
},
{
"last_affected": "2.0.0-p12"
},
{
"last_affected": "2.0.0-p13"
},
{
"last_affected": "2.0.0-p14"
},
{
"last_affected": "2.0.0-p15"
},
{
"last_affected": "2.0.0-p16"
},
{
"last_affected": "2.0.0-p17"
},
{
"last_affected": "2.0.0-p18"
},
{
"last_affected": "2.0.0-p19"
}
]
}