What is the CVSS score of CVE-2025-39665?

CVE-2025-39665 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2025-39665?

CVE-2025-39665 presents moderate security risk rated CVSS 5.3. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-39665?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Ubuntu CVE-2025-39665

EUVD-2025-200737 MEDIUM

Observable Discrepancy (CWE-203)

2025-12-03 security@checkmk.com

Information Disclosure Ubuntu Debian Nagvis

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-200737

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

Patch released

Mar 15, 2026 - 16:14 nvd

Patch available

CVE Published

Dec 03, 2025 - 10:15 nvd

MEDIUM 5.3

DescriptionCVE.org

User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.

AnalysisAI

CVE-2025-39665 is a security vulnerability (CVSS 5.3) that allows an unauthenticated attacker. Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Apply the vendor-supplied patch immediately.

More in Nagvis

View all

CVE-2022-3979 HIGH This Week POC

8.1 Nov 13

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic.php. Rated high severity (CVSS 8.1), this

CVE-2021-33178 MEDIUM This Month

6.5 Oct 14

The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path trave

CVE-2017-6393 MEDIUM This Month

6.1 Mar 02

An issue was discovered in NagVis 1.9b12. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable,

CVE-2024-47093 MEDIUM This Month

6.1 Dec 19

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS. Rated medium severity (CVSS 6.1)

CVE-2023-46287 MEDIUM This Month

6.1 Oct 20

XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php. Rated medium severit

CVE-2024-47090 MEDIUM This Month

5.1 May 27

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS. Rated medium severity (CVSS 5.1)

CVE-2024-38866 MEDIUM This Month

5.3 May 27

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection. Rated medium se

Same weakness CWE-203 – Observable Discrepancy

View all

CVE-2017-5753 MEDIUM POC

5.6

CVE-2017-13099 HIGH POC

7.5

CVE-2017-1000385 MEDIUM POC

5.9

CVE-2017-6168 HIGH POC

7.4

CVE-2017-13098 HIGH POC

7.5

CVE-2017-17427 MEDIUM POC

5.9

CVE-2018-3639 MEDIUM POC

5.5

CVE-2019-25337 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Medium

nagvis

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
questing	needs-triage	-
upstream	released	1:1.9.48-1
plucky	ignored	end of life, was needs-triage

Debian

nagvis

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	1:1.9.25-2	-
bullseye (security)	vulnerable	1:1.9.25-2+deb11u2	-
bookworm	vulnerable	1:1.9.34-1	-
trixie	vulnerable	1:1.9.47-1	-
forky, sid	fixed	1:1.9.48-1	-
(unstable)	fixed	1:1.9.48-1	-

CVE-2025-39665 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-39665

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Nagvis

Same weakness CWE-203 – Observable Discrepancy

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code