CVE catalog
CVE-2025-32916
UBUNTU-CVE-2025-32916
- Severity
- Low · CVSS 1
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.19% · Oct 25, 2026
Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | check-mk | pro | 1.2.6p5-1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1ubuntu0.16.04.1 | vulnerable |
| Ubuntu | check-mk | pro | 1.2.6p12-1ubuntu0.16.04.1+esm1 | vulnerable |
| Ubuntu | check-mk | 18.04 | 1.2.8p16-1ubuntu0.1 | vulnerable |
| Ubuntu | check-mk | 18.04 | 1.2.8p16-1ubuntu0.2 | vulnerable |
| Cpe | checkmk | Not reported | Not reported | unknown |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: