CVE-2014-5338: Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 a...

Security readout for executives and security teams

CVE-2014-5338 is an authenticated cross-site scripting issue in Check_MK multisite. A logged-in user could inject script or HTML into the monitoring web interface. This can expose browser-session data or manipulate what other users see, but the public bundle does not show unauthenticated access or active exploitation. Exposure is likely limited to organizations running affected Check_MK multisite versions with authenticated user access to the monitoring UI. Internet exposure raises business risk, but the source bundle does not confirm default exposure or affected downstream package versions beyond the named releases. Treat as a timely maintenance fix for monitoring environments, not an emergency based on current evidence. Prioritize faster if Check_MK is exposed beyond administrators or used by broad internal user groups. Mitigation focus: Upgrade Check_MK to 1.2.4p4, 1.2.5i4, or later supported releases.; Check Red Hat or vendor advisories for package-specific fixed builds.; Restrict multisite access to trusted authenticated users until remediation is complete..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.