CVE-2025-39663

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-39663
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39663.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-39663
Downstream
Published
2025-10-30T11:15:32.400Z
Modified
2026-03-15T14:16:26.425483Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central site. Affecting Checkmk before 2.4.0p14, 2.3.0p39, 2.2.0 and 2.1.0 (eol).

References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Introduced
a08e390df0ae711bbee6fbdd0d32da1452918ae3
Fixed
779a2941a075e1461b45407f715176524414b994
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
779a2941a075e1461b45407f715176524414b994
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
774354b2551f8e27948fc4cebfc950ee81d28e0d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b78272d604bfda3f7954ae5cec8ff3e3fddc5cf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
72fdb481b2f673c5a80d56cfec3dffa598195a0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a6aaa241192f2257300a50839bf7423b335b7771
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
418c120db01cb5030ac6d51e2b54b5277e44738b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a5fbb41e2f4568843e01625799cedbfd753373c6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
257af35825115a122e4100973d840c041ea3edf5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b765e39ffb10efc5bf5908857708269530c279b9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e13705010f4fc8edd4fbd6165929c9711af3ec6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ef9f4eb93199860e6228f6ed61b4839dac08897d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4477439987a148bcf3aa82fa9603f814b63be789
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ba483a2e011b281853e3d4789c7f77d5bd2915c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
570a45d3057c0e93d578023268ad80adcca0b3f9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c35d3f8bb42581be37e1c127e24db33cb3b21b9c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cc70c4960fd683bcc20c932fa4fc9dfb5603c823
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c48f224bdb7455b977ddf276b68a8b485e781951
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b059bcabaa18a351f410f73b07cc86b877d54dcd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63a5c86fcf61869353ff6334cc5d3215ad8a279a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d30336dfdd1f9587f4be5dab21b4cb8e6f174683
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d932b6ef60b2ff46bd38576f355411d40a4e6b0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e2dd54a1897a230eabd6176c95a83391ba3e5420
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0a8e4f2502496b7991a330c5aea61196c023a2bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd541d4d7d95668dd33d61bc16fa8df17f4affcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9a9f01f52a3dbf900cadf984cd274f1bcd463232
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6fdb329ff5c707e469c622dce532ecf61cc7aec1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c9a97371302282f2f7554f3d8b48eca91a6e082
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b68be456036a63c34633d33e9231a5930e253b7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3fa6f784f929a7d79248e0b212a238e0328d2942
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a1ade8ba564934cabb92903f49190ee73c6e94b3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8b9812eceee2177dc6fa389a3e13f09fcd67392b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b759adfe10b408d26d86ab1a16cb7dbd1eb18ada
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f1239fb557aaf7272df83c0d87e11100889b872c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a6bc3d8dc8852375275f81654dd00a1f94f5ffd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1fc0aea14b848c3d4eaf779a42ac59e3af0e8df6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3c7ace5f5f48c54974558e49f4a088735be56a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4dabbfb583bb1e70b3257a8a3fc7bcdacaf8b4e9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f93c345b2ef1435d51333d3593a6b1701d5c249c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
241e7e776b96d316693575e91023518e20e171be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4abde4a41de677e103561e4fb75b81f6ee8b80dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4807b162eabc6da5accf1391ddd4c35dc964f904
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
407df5847db1227bee188f0d81929351616da740
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ef5a23e8333efd927f110e0d35ee501d6f02031
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e167463fc0836b6d90a444854ffcc8ac99aa9603
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
672ad736fd4844851e3a95aa6a725213b7d432e0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ad0758a3c7d5c68ceb2b561cc099d5b0dcf84170
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a314c586cd7a3ebb27029427654d0bea50db5452
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cf744b214554060204275d22fad1dd92e8f61fa9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
241a54afaa485f507682f43e4ca5ed8c36c85c22
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a09b9121bd499fd38d2167004089f0da782d68a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
365b53739e47f81c0e8b55934b6d9f59ddb39cf7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
df508000718009a401a35af049c246997421bdba
Database specific 
{
    "versions": [
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p38"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p9"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39663.json"