CVE-2025-12405highCWE-269

CVE-2025-12405: falha de alta gravidade em Google Cloud Looker Studio

Unauthorized access through stored credentials in Looker Studio

Publicada em

Seguir esta CVE+ Monitorar Looker Studio

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 0.3%
An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors. A Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored credentials attached to the report. This vulnerability was patched on 21 July 2025, and no customer action is needed.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear
Produtos afetados
Google Cloud · Looker Studio
CVEs relacionadas — Google Cloud Looker Studio

No mesmo produto, das mais perigosas para as menos.

CVE-2025-12397HIGHSQL Injection in Looker StudioEPSS 0.3%CVE-2025-12409HIGHSQL Injection in Looker StudioEPSS 0.3%