User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
CVSS Score
5.3
EPSS Score
0.001
Published
2025-12-03
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS
CVSS Score
6.1
EPSS Score
0.0
Published
2025-05-27
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
CVSS Score
7.5
EPSS Score
0.001
Published
2025-05-27
Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS
CVSS Score
8.8
EPSS Score
0.002
Published
2024-12-19