Vulnerability Details CVE-2024-38857
Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can facilitate phishing attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.2%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2024-38857
-
cpe:2.3:a:checkmk:checkmk:1.2.3
-
cpe:2.3:a:checkmk:checkmk:1.2.4
-
cpe:2.3:a:checkmk:checkmk:1.2.5
-
cpe:2.3:a:checkmk:checkmk:1.2.6
-
cpe:2.3:a:checkmk:checkmk:1.2.7
-
cpe:2.3:a:checkmk:checkmk:1.2.8
-
cpe:2.3:a:checkmk:checkmk:1.4.0
-
cpe:2.3:a:checkmk:checkmk:1.5.0
-
cpe:2.3:a:checkmk:checkmk:1.6.0
-
cpe:2.3:a:checkmk:checkmk:1.6.4
-
cpe:2.3:a:checkmk:checkmk:2.0.0
-
cpe:2.3:a:checkmk:checkmk:2.1.0
-
cpe:2.3:a:checkmk:checkmk:2.2.0
-
cpe:2.3:a:checkmk:checkmk:2.3.0