Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2020-28919

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.

  • Published: Jan 15, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-28919
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
checkmk / checkmk 1.6.0-p5 1.6.0-p5.x
checkmk / checkmk 1.6.0-p6 1.6.0-p6.x
checkmk / checkmk 1.6.0-p7 1.6.0-p7.x
checkmk / checkmk 1.6.0-p8 1.6.0-p8.x
checkmk / checkmk 1.6.0-p9 1.6.0-p9.x
checkmk / checkmk 1.6.0-p10 1.6.0-p10.x
checkmk / checkmk 1.6.0-p11 1.6.0-p11.x
checkmk / checkmk 1.6.0-p12 1.6.0-p12.x
checkmk / checkmk 1.6.0-p13 1.6.0-p13.x
checkmk / checkmk 1.6.0-p14 1.6.0-p14.x
checkmk / checkmk 1.6.0-p15 1.6.0-p15.x
checkmk / checkmk 1.6.0-p16 1.6.0-p16.x
checkmk / checkmk 1.6.0 1.6.0.x
checkmk / checkmk 1.6.0-p4 1.6.0-p4.x
checkmk / checkmk 1.6.0-p3 1.6.0-p3.x
checkmk / checkmk 1.6.0-p2 1.6.0-p2.x
checkmk / checkmk 1.6.0-p1 1.6.0-p1.x
checkmk / checkmk 1.6.0-p17 1.6.0-p17.x
checkmk / checkmk 1.6.0-p18 1.6.0-p18.x
checkmk / checkmk 1.6.0-b1 1.6.0-b1.x
checkmk / checkmk 1.6.0-b10 1.6.0-b10.x
checkmk / checkmk 1.6.0-b12 1.6.0-b12.x
checkmk / checkmk 1.6.0-b3 1.6.0-b3.x
checkmk / checkmk 1.6.0-b4 1.6.0-b4.x
checkmk / checkmk 1.6.0-b5 1.6.0-b5.x
checkmk / checkmk 1.6.0-b9 1.6.0-b9.x