CVE-2025-64999: Cross-site scripting in HTML logs of Synthetic Monitoring test services
Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64999?
CVE-2025-64999 is considered a high-severity vulnerability due to the potential for remote code execution through JavaScript injection.
How do I fix CVE-2025-64999?
To fix CVE-2025-64999, update Checkmk to version 2.4.0p22 or 2.3.0p43 or later.
What impact does CVE-2025-64999 have on affected software?
CVE-2025-64999 allows an attacker to inject malicious JavaScript into HTML logs, posing risks to users accessing those logs.
Which versions of Checkmk are affected by CVE-2025-64999?
Checkmk versions prior to 2.4.0p22 and 2.3.0p43 are affected by CVE-2025-64999.
Is there a workaround for CVE-2025-64999 while waiting for a patch?
There is no known effective workaround for CVE-2025-64999, so upgrading to the patched versions is recommended.