CVE-2023-23549

LOW

Checkmk - Denial of Service

Title source: rule

Description

Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.

References (1)

[Vendor Advisory] https://checkmk.com/werk/16219

Scores

CVSS v3 2.7

EPSS 0.0005

EPSS Percentile 16.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1284

Status published

Products (2)

checkmk/checkmk 2.0.0 (49 CPE variants)

checkmk/checkmk 2.1.0

Published Nov 15, 2023

Tracked Since Feb 18, 2026