CVE-2025-13292highCWE-269

CVE-2025-13292: falha de alta gravidade em Google Cloud Apigee-X

Improper access control in Google Cloud Apigee-X allows cross-tenant Analytics modification and log data access.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apigee-X

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.3%
A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data and access logs belonging to other Apigee customer organizations. Apigee-X was found to be vulnerable. This vulnerability was patched in version 1-16-0-apigee-3. No user action is required for this.
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/U:Clear
Produtos afetados
Google Cloud · Apigee-X
CVEs relacionadas — Google Cloud Apigee-X

No mesmo produto, das mais perigosas para as menos.

CVE-2026-2264CRITICALServer-Side Request Forgery and Credential Exfiltration in Google Cloud Apigee via SetIntegrationRequest Policy.EPSS 0.4%