← Database

CVE-2025-39663

HIGH CVSS: 8.4 Published: 2025-10-30 Modified: 2026-06-17

Description

Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central site. Affecting Checkmk before 2.4.0p14, 2.3.0p39, 2.2.0 and 2.1.0 (eol).

Affected Platforms

Checkmk Checkmk

Weakness Type

CWE-80, CWE-79

References