CVE-2025-8052lowCWE-564

CVE-2025-8052: falha de baixa gravidade em opentext Flipper

HQL Injection vulnerability has been discovered in Opentext Flipper.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Flipper

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 1epss 0.4%
SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:D/RE:M/U:Green
Produtos afetados
opentext · Flipper
CVEs relacionadas — opentext Flipper

No mesmo produto, das mais perigosas para as menos.

CVE-2025-8051MEDIUMPath traversal validation vulnerability has been discovered in opentext Flipper.EPSS 0.4%CVE-2025-8048MEDIUMExternal Control of File path vulnerability has been discovered on Openext Flipper.EPSS 0.3%CVE-2025-8050MEDIUMExternal Control of File vulnerability has been discovered in opentext Flipper.EPSS 0.3%CVE-2025-8049LOWInsufficient Access Control vulnerability has been discovered in OpenText Flipper.EPSS 0.3%CVE-2025-8053LOWInsufficient access control vulnerability has been discovered in Opentext Flipper.EPSS 0.3%