CVE-2025-12807CWE-89sql-injection
CVE-2025-12807
published December 9, 2025
What it is
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.
The record
Technical detail
- CVSS
- 8.7 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00435 · 36.7th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2025-12-09T21:17Z
References (1)
EPSS history
Timeline