BaseFortify

Publication date: 2025-10-20

Last updated on: 2025-10-28

Assigner: OpenText

Description

SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-20

Last Modified

2025-10-28

Generated

2026-07-06

AI Q&A

2025-10-20

EPSS Evaluated

2026-07-05

NVD

CVE-2025-8052

Affected Vendors & Products

Vendor	Product	Version / Range
opentext	flipper	3.1.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-564	Using Hibernate to execute a dynamic SQL statement built with user-controlled input can allow an attacker to modify the statement's meaning or to execute arbitrary SQL commands.

Attack-Flow Graph

Executive Summary

This vulnerability is a SQL Injection issue in opentext Flipper version 3.1.2. It allows a low privilege user to interact with the database in unintended ways by exploiting the HQL processor, potentially extracting data.

Impact Analysis

The vulnerability could allow an attacker with low privileges to extract data from the database by manipulating the HQL processor, potentially leading to unauthorized data access.

Hi! I’m here to help you understand CVE-2025-8052. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70