PT-2026-20543 · Delinea · Delinea Cloud Suite+1

Dawid Dudek · Publicado 2026-02-18 · Atualizado 2026-02-19 · CVE-2025-12812

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Delinea Cloud Suite versions prior to 25.1 Delinea Privileged Access Service versions prior to 25.1

Description The software contains a flaw due to improper neutralization of special elements used in an SQL command, which could lead to SQL injection. The issue affects Delinea Cloud Suite and Privileged Access Service.

Recommendations Update Delinea Cloud Suite to version 25.1 or later. Update Delinea Privileged Access Service to version 25.1 or later.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-12812

Produtos afetados

Delinea Cloud Suite

Delinea Privileged Access Service

Referências · 7

• https://t.me/CVEtracker/45029 · Publicação no Telegram
• https://trust.delinea.com · Nota
• https://trust.delinea.com/?tcuUid=9681f2f0-f9b2-4c7a-abc6-1fcd65c34f46 · Nota
• https://docs.delinea.com/online-help/cloud-suite/release-notes/cloud-suite/25.1.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-12812 · Nota de Segurança
• https://twitter.com/CVEnew/status/2024258054167155025 · Publicação no Twitter
• https://t.me/cveNotify/152448 · Publicação no Telegram