CVE-2025-12397highCWE-89

CVE-2025-12397: falha de alta gravidade em Google Cloud Looker Studio

SQL Injection in Looker Studio

Publicada em

Seguir esta CVE+ Monitorar Looker Studio

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.3%
A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability was patched on 21 July 2025, and no customer action is needed.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/U:Clear
Produtos afetados
Google Cloud · Looker Studio
CVEs relacionadas — Google Cloud Looker Studio

No mesmo produto, das mais perigosas para as menos.

CVE-2025-12405HIGHUnauthorized access through stored credentials in Looker StudioEPSS 0.3%CVE-2025-12409HIGHSQL Injection in Looker StudioEPSS 0.3%