Dashboard / CVE-2025-32916

CVE-2025-32916

LOW
INFO Priority: 0.00 BB Relevance: 12/100
Published: 2025-10-09 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: Passive
S: X
AT: Present
VC: Low
VI: None
VA: None

Description

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Weakness Classification (1)

Affected Software (95)

VendorProductVersion
checkmk checkmk 2.1.0 – 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
checkmk checkmk 2.2.0
Showing 30 of 95 entries

References & Advisories (1)

Bug Bounty Relevance

12 / 100
✓ Low complexity

CVSS Score

1.0 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.19%
Raw Score 0.001920
Percentile 8.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00192
2026-10-28
0.00192

Intelligence Sources

nvd ref →

External Links