VULNERABILITY INTELLIGENCE

CVE-2025-32916

CVSS score4.3 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-10-09
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Weakness classification

  • security@checkmk.com: CWE-598

Primary references