Agent receiver accepts mTLS requests without a client certificate

Privilege escalation in mk_oracle plugins

Insufficient permission validation when showing agent information

Path-Traversal in report scheduler

Livestatus injection in mknotifyd

Disabled automation users could still authenticate

Potential livestatus injection in prediction graph page

Livestatus injection in monitoring quicksearch

Reflected links in error message facilitate phishing attacks

Cross-site scripting in Robotmk logs view

XSS in view page with SLA column

Reflected links in visuals facilitate phishing attacks

XSS in business intelligence

Sensitive data exposed during automatic agent updates

Logging of sitesecret to automations log

Argument injection to runmqsc

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validatio

Fix stored XSS in URL dashboard widget via dangerous URI schemes

Cross-site scripting in dashlet title

Stored cross-site scripting in Pending Changes sidebar

XSS in Unified Search via Unescaped Host/Service Names

Deletion of passwords via RestApi

Cross-site scripting in HTML logs of Synthetic Monitoring test services

Insufficient permission validation on multiple REST API endpoints

Insufficient permission validation when configuring notification parameters

XSS in SQL check parameters

XSS in confirmation pop-up

XSS in inventory view

XSS in graph rendering

Livestatus injection via monitoring filter values

Missing decompression size limit in agent receiver allows memory exhaustion via push agent data

Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

Missing authorization for viewing background jobs

Missing Authorization Allows Editing of Foreign Reports

Fix Business Intelligence API Pack permission

User Messages widget leaked issuer messages on shared dashboards

Missing Permission Check on Analyze Configuration Page

Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

Potentially senitive path exposed via unauthenticated http route

Session logout can be overwritten by long lasting request

local IP restriction of internal HTTP endpoints

mk-oracle: Local privilege escalation via insecure Oracle Home library loading

mk-oracle: Local privilege escalation via malicious Oracle Instant Client

mk_sap_hana: Privilege escalation via crafted sapstartsrv process name

Fix XSS in service discovery active check output

Fix stored XSS in global settings change log

XSS in Crash Report Page

Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

SNMP and IMPI secrets written to audit log

Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint