CVE-2025-39664

Source
https://cve.org/CVERecord?id=CVE-2025-39664
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39664.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-39664
Downstream
Published
2025-10-09T15:01:55Z
Modified
2026-10-25T02:30:27Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Path-Traversal in report scheduler
Details

Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.

Database specific
{
    "cna_assigner":  "Checkmk",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39664.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "2.1.0"
                        },
                        {
                            "last_affected":  "2.1.0"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandaloneSingleVersion"
                }
            ]
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "2.4.0"
                        },
                        {
                            "fixed":  "2.4.0p13"
                        },
                        {
                            "introduced":  "2.3.0"
                        },
                        {
                            "fixed":  "2.3.0p38"
                        },
                        {
                            "introduced":  "2.2.0"
                        },
                        {
                            "fixed":  "2.2.0p46"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.0"
                },
                {
                    "fixed":  "2.2.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p1"
                },
                {
                    "last_affected":  "2.2.0-p1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p10"
                },
                {
                    "last_affected":  "2.2.0-p10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p11"
                },
                {
                    "last_affected":  "2.2.0-p11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p12"
                },
                {
                    "last_affected":  "2.2.0-p12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p13"
                },
                {
                    "last_affected":  "2.2.0-p13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p14"
                },
                {
                    "last_affected":  "2.2.0-p14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p16"
                },
                {
                    "last_affected":  "2.2.0-p16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p17"
                },
                {
                    "last_affected":  "2.2.0-p17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p18"
                },
                {
                    "last_affected":  "2.2.0-p18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p19"
                },
                {
                    "last_affected":  "2.2.0-p19"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p21"
                },
                {
                    "last_affected":  "2.2.0-p21"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p22"
                },
                {
                    "last_affected":  "2.2.0-p22"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p23"
                },
                {
                    "last_affected":  "2.2.0-p23"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p24"
                },
                {
                    "last_affected":  "2.2.0-p24"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p25"
                },
                {
                    "last_affected":  "2.2.0-p25"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p26:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p26"
                },
                {
                    "last_affected":  "2.2.0-p26"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p27:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p27"
                },
                {
                    "last_affected":  "2.2.0-p27"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p28:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p28"
                },
                {
                    "last_affected":  "2.2.0-p28"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p29:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p29"
                },
                {
                    "last_affected":  "2.2.0-p29"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p3"
                },
                {
                    "last_affected":  "2.2.0-p3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p30:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p30"
                },
                {
                    "last_affected":  "2.2.0-p30"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p31:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p31"
                },
                {
                    "last_affected":  "2.2.0-p31"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p32:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p32"
                },
                {
                    "last_affected":  "2.2.0-p32"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p33:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p33"
                },
                {
                    "last_affected":  "2.2.0-p33"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p34:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p34"
                },
                {
                    "last_affected":  "2.2.0-p34"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p35:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p35"
                },
                {
                    "last_affected":  "2.2.0-p35"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p36:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p36"
                },
                {
                    "last_affected":  "2.2.0-p36"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p37:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p37"
                },
                {
                    "last_affected":  "2.2.0-p37"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p38:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p38"
                },
                {
                    "last_affected":  "2.2.0-p38"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p39:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p39"
                },
                {
                    "last_affected":  "2.2.0-p39"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p4"
                },
                {
                    "last_affected":  "2.2.0-p4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p40:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p40"
                },
                {
                    "last_affected":  "2.2.0-p40"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p41:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p41"
                },
                {
                    "last_affected":  "2.2.0-p41"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p42:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p42"
                },
                {
                    "last_affected":  "2.2.0-p42"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p43:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p43"
                },
                {
                    "last_affected":  "2.2.0-p43"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p44:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p44"
                },
                {
                    "last_affected":  "2.2.0-p44"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p45:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p45"
                },
                {
                    "last_affected":  "2.2.0-p45"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p5"
                },
                {
                    "last_affected":  "2.2.0-p5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p6"
                },
                {
                    "last_affected":  "2.2.0-p6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p7"
                },
                {
                    "last_affected":  "2.2.0-p7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p8"
                },
                {
                    "last_affected":  "2.2.0-p8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0-p9"
                },
                {
                    "last_affected":  "2.2.0-p9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-NA"
                },
                {
                    "last_affected":  "2.3.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p1"
                },
                {
                    "last_affected":  "2.3.0-p1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p10"
                },
                {
                    "last_affected":  "2.3.0-p10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p11"
                },
                {
                    "last_affected":  "2.3.0-p11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p12"
                },
                {
                    "last_affected":  "2.3.0-p12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p13"
                },
                {
                    "last_affected":  "2.3.0-p13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p14"
                },
                {
                    "last_affected":  "2.3.0-p14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p15"
                },
                {
                    "last_affected":  "2.3.0-p15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p16"
                },
                {
                    "last_affected":  "2.3.0-p16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p17"
                },
                {
                    "last_affected":  "2.3.0-p17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p18"
                },
                {
                    "last_affected":  "2.3.0-p18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p19"
                },
                {
                    "last_affected":  "2.3.0-p19"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p2"
                },
                {
                    "last_affected":  "2.3.0-p2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p20"
                },
                {
                    "last_affected":  "2.3.0-p20"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p21"
                },
                {
                    "last_affected":  "2.3.0-p21"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p22"
                },
                {
                    "last_affected":  "2.3.0-p22"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p23"
                },
                {
                    "last_affected":  "2.3.0-p23"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p24"
                },
                {
                    "last_affected":  "2.3.0-p24"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p25"
                },
                {
                    "last_affected":  "2.3.0-p25"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p26"
                },
                {
                    "last_affected":  "2.3.0-p26"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p27"
                },
                {
                    "last_affected":  "2.3.0-p27"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p28"
                },
                {
                    "last_affected":  "2.3.0-p28"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p29"
                },
                {
                    "last_affected":  "2.3.0-p29"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p3"
                },
                {
                    "last_affected":  "2.3.0-p3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p30"
                },
                {
                    "last_affected":  "2.3.0-p30"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p31"
                },
                {
                    "last_affected":  "2.3.0-p31"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p32"
                },
                {
                    "last_affected":  "2.3.0-p32"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p33"
                },
                {
                    "last_affected":  "2.3.0-p33"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p34"
                },
                {
                    "last_affected":  "2.3.0-p34"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p35"
                },
                {
                    "last_affected":  "2.3.0-p35"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p36"
                },
                {
                    "last_affected":  "2.3.0-p36"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p37"
                },
                {
                    "last_affected":  "2.3.0-p37"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p4"
                },
                {
                    "last_affected":  "2.3.0-p4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p5"
                },
                {
                    "last_affected":  "2.3.0-p5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p6"
                },
                {
                    "last_affected":  "2.3.0-p6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p7"
                },
                {
                    "last_affected":  "2.3.0-p7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p8"
                },
                {
                    "last_affected":  "2.3.0-p8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0-p9"
                },
                {
                    "last_affected":  "2.3.0-p9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-NA"
                },
                {
                    "last_affected":  "2.4.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p1"
                },
                {
                    "last_affected":  "2.4.0-p1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p10"
                },
                {
                    "last_affected":  "2.4.0-p10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p11"
                },
                {
                    "last_affected":  "2.4.0-p11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p12"
                },
                {
                    "last_affected":  "2.4.0-p12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p2"
                },
                {
                    "last_affected":  "2.4.0-p2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p3"
                },
                {
                    "last_affected":  "2.4.0-p3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p4"
                },
                {
                    "last_affected":  "2.4.0-p4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p5"
                },
                {
                    "last_affected":  "2.4.0-p5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p6"
                },
                {
                    "last_affected":  "2.4.0-p6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p7"
                },
                {
                    "last_affected":  "2.4.0-p7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p8"
                },
                {
                    "last_affected":  "2.4.0-p8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-p9"
                },
                {
                    "last_affected":  "2.4.0-p9"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*
2.2.0-p1
2.2.0-p10
2.2.0-p11
2.2.0-p12
2.2.0-p13
2.2.0-p14
2.2.0-p16
2.2.0-p17
2.2.0-p18
2.2.0-p19
2.2.0-p21
2.2.0-p22
2.2.0-p23
2.2.0-p24
2.2.0-p25
2.2.0-p26
2.2.0-p27
2.2.0-p28
2.2.0-p29
2.2.0-p3
2.2.0-p30
2.2.0-p31
2.2.0-p32
2.2.0-p33
2.2.0-p34
2.2.0-p35
2.2.0-p36
2.2.0-p37
2.2.0-p38
2.2.0-p39
2.2.0-p4
2.2.0-p40
2.2.0-p41
2.2.0-p42
2.2.0-p43
2.2.0-p44
2.2.0-p45
2.2.0-p5
2.2.0-p6
2.2.0-p7
2.2.0-p8
2.2.0-p9
2.3.0-NA
2.3.0-p1
2.3.0-p10
2.3.0-p11
2.3.0-p12
2.3.0-p13
2.3.0-p14
2.3.0-p15
2.3.0-p16
2.3.0-p17
2.3.0-p18
2.3.0-p19
2.3.0-p2
2.3.0-p20
2.3.0-p21
2.3.0-p22
2.3.0-p23
2.3.0-p24
2.3.0-p25
2.3.0-p26
2.3.0-p27
2.3.0-p28
2.3.0-p29
2.3.0-p3
2.3.0-p30
2.3.0-p31
2.3.0-p32
2.3.0-p33
2.3.0-p34
2.3.0-p35
2.3.0-p36
2.3.0-p37
2.3.0-p4
2.3.0-p5
2.3.0-p6
2.3.0-p7
2.3.0-p8
2.3.0-p9
2.4.0-NA
2.4.0-p1
2.4.0-p10
2.4.0-p11
2.4.0-p12
2.4.0-p2
2.4.0-p3
2.4.0-p4
2.4.0-p5
2.4.0-p6
2.4.0-p7
2.4.0-p8
2.4.0-p9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39664.json"