CVE-2025-64999 - Cross-site scripting in HTML logs of Synthetic Monitoring test services

CVE ID : CVE-2025-64999 Published : Feb. 26, 2026, 10:26 a.m. | 53 minutes ago Description : Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...