CVE-2021-40906
Estado: ModificadaMedia (6.1)—
CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser (such as JavaScript or other client-side scripts) or to steal the session cookies of a user who has previously authenticated via a man in the middle. Successful exploitation requires access to the web service resource without authentication.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.99%
- Percentil entre todas las CVEs puntuadas: 61
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-40906",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6.1,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2022-03-25T23:15:08.287",
"references": [
{
"url": "https://github.com/Edgarloyola/CVE-2021-40906",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://github.com/Edgarloyola/CVE-2021-40906",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser (such as JavaScript or other client-side scripts) or to steal the session cookies of a user who has previously authenticated via a man in the middle. Successful exploitation requires access to the web service resource without authentication."
},
{
"lang": "es",
"value": "El software CheckMK Raw Edition (versiones 1.5.0 a 1.6.0) no sanea la entrada de un parámetro de servicio web que está en una zona no autenticada. Este ataque de tipo XSS reflejado permite a un atacante abrir una puerta trasera en el dispositivo con contenido HTML e interpretado por el navegador (como JavaScript u otros scripts del lado del cliente) o robar las cookies de sesión de un usuario que se haya autenticado previamente por medio de un ataque de tipo man in the middle. Una explotación con éxito requiere el acceso al recurso del servicio web sin autenticación"
}
],
"lastModified": "2026-07-09T01:17:02.513",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52593590-1B3F-497C-B1CA-B2395CC7F5FD",
"versionEndExcluding": "1.6.0",
"versionStartIncluding": "1.5.0"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D63367A-3B90-462E-B6AD-1CB5721FD45E"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5E2E954-B3C3-4CC0-B2C8-0E2BEEC93016"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1638594A-84F1-44F6-BB30-D4CC73ECDA38"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B2757BF-E3B7-487A-8929-0208D3B0D3CE"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F01E79D2-EFA4-4A7E-A286-3E86F52B429D"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D12A6070-0542-4293-AE13-85D4E81E1672"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AF633FE-DE7C-4548-9ED2-880E915FC33C"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F15190EF-E3F5-4AD1-B748-C0E63C8CB741"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30F84B89-7EC6-44E6-A164-4C170379D55C"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDA94D2F-F27C-4DF6-84AE-8ED1BBC7F61E"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71CF8EFD-17F6-4D9A-961A-4B949A6C8B61"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B04DC2A8-CF05-4FB2-AE2F-AE07943B998D"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F3BECA6-983C-436E-A635-4E1FB9080E56"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51A9A2B4-3693-490A-94E2-64E1DB795646"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C14AB385-8A9F-46FA-A1C5-4A4A45C1B7F5"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC41CC5F-F088-4E65-B076-35665F0F6C7E"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC636B76-B050-4B73-A524-21862B020797"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D49B1D63-8FDD-45FD-99F0-AA9E4FBCCB00"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AFA4AF4-8395-4BBB-BA78-7116AC1DCDE7"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5565C1C5-5C23-4449-AB87-49A304382387"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78320525-F346-4419-81E3-4A47BD17C808"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA91018D-DA38-4026-9F47-383F16C85031"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8DBEF67-A9AE-46D5-89D0-076CDB1AA06A"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63E87316-1CB2-4CF4-B379-4284C8C39053"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CCE5845-1B77-4E97-B508-41400F4E1F31"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FCED94F-7683-40FE-B511-F1F49CDD1F73"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C4E70EC-3D46-40CE-AD59-597EFD721014"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E695A8-9A1E-4D7A-AB3B-AAC2CF777773"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "653632A8-E700-404A-ADB2-B3A50253ECB0"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60733789-DDA3-4819-A9F1-70B76AC715CB"
},
{
"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D90DBA66-EF97-4CE9-AD4C-3A82F70D2250"
},
{
"criteria": "cpe:2.3:a:tribe29:checkmk:1.6.0b10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EE29788-9815-47C5-88CC-039E82348482"
},
{
"criteria": "cpe:2.3:a:tribe29:checkmk:1.6.0b11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF943CDA-131A-4951-9281-C0F7711C511B"
},
{
"criteria": "cpe:2.3:a:tribe29:checkmk:1.6.0p10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FA770FD-D758-4590-9A6E-5A87E137C53E"
},
{
"criteria": "cpe:2.3:a:tribe29:checkmk:1.6.0p17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6786541D-CB3B-432D-8D0F-05178237FE4C"
},
{
"criteria": "cpe:2.3:a:tribe29:checkmk:1.6.0p18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E668FDEE-6503-4FF5-BA24-DD84180CB38A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}