CVE-2020-28919

Published: Jan 15, 2022Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.

Affected (26)

Products: Checkmk: Checkmk

Checkmk

1 product

Checkmk

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Checkmk Checkmk	Version 1.6.0
Checkmk Checkmk	Version 1.6.0 b10
Checkmk Checkmk	Version 1.6.0 b12
Checkmk Checkmk	Version 1.6.0 b1
Checkmk Checkmk	Version 1.6.0 b3
Checkmk Checkmk	Version 1.6.0 b4
Checkmk Checkmk	Version 1.6.0 b5
Checkmk Checkmk	Version 1.6.0 b9
Checkmk Checkmk	Version 1.6.0 p10
Checkmk Checkmk	Version 1.6.0 p11
Checkmk Checkmk	Version 1.6.0 p12
Checkmk Checkmk	Version 1.6.0 p13
Checkmk Checkmk	Version 1.6.0 p14
Checkmk Checkmk	Version 1.6.0 p15
Checkmk Checkmk	Version 1.6.0 p16
Checkmk Checkmk	Version 1.6.0 p17
Checkmk Checkmk	Version 1.6.0 p18
Checkmk Checkmk	Version 1.6.0 p1
Checkmk Checkmk	Version 1.6.0 p2
Checkmk Checkmk	Version 1.6.0 p3
Checkmk Checkmk	Version 1.6.0 p4
Checkmk Checkmk	Version 1.6.0 p5
Checkmk Checkmk	Version 1.6.0 p6
Checkmk Checkmk	Version 1.6.0 p7
Checkmk Checkmk	Version 1.6.0 p8
Checkmk Checkmk	Version 1.6.0 p9