Veille CVE

Semaine du 6 octobre au 12 octobre 2025

2 CVE sur 5

Critique 0 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-39664 6.5 Moyenne

    Checkmk GmbH Checkmk · Checkmk checkmk

    Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.

  2. CVE-2025-32916 4.3 Moyenne

    Checkmk GmbH Checkmk · Checkmk checkmk

    Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.