CVE-2024-38858

2.3 lowEPSS 0.3%

Low (2.3) in checkmk checkmk. EPSS 0.3% chance of exploitation in the next 30 days.

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

Severity

2.3 low

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-09-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19