Medium severity5.4NVD Advisory· Published Jan 15, 2022· Updated Jun 17, 2026
CVE-2020-28919
CVE-2020-28919
Description
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*+ 27 more
- cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p17:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p18:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:*
- cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <1.6.0p19
Patches
Vulnerability mechanics
References
4- github.com/tribe29/checkmk/commit/c00f450f884d8a229b7d8ab3f0452ed802a1ae04nvdPatchThird Party Advisory
- github.com/tribe29/checkmk/commit/e7fd8e4c90be490e4293ec91804d00ec01af5ca6nvdPatch
- emacsninja.com/posts/cve-2020-28919-stored-xss-in-checkmk-160p18.htmlnvdExploitThird Party Advisory
- checkmk.com/check_mk-werks.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.