CVE-2025-39663 — Cross Site Scripting through compromised remote site
Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central s…
Published: 2025-10-30 · CVSS: 8.5 · CVSS 4.0
Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central site. Affecting Checkmk before 2.4.0p14, 2.3.0p39, 2.2.0 and 2.1.0 (eol).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7