CVE-2025-32916CWE-598

CVE-2025-32916

Medium · published October 9, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00192 · 8.4th percentile
Weakness
CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2025-10-09T19:16Z
Affected products (95)
ProductVersionsFixed in
checkmk/checkmk≥ 2.1.0, < 2.2.02.2.0
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
References (1)
EPSS history
Timeline
  • 09 OCT 15:00Z
    Sensitive form data in URL query parameters
    cvelistv5