PT-2025-42810 · Opentext · Opentext Flipper

Published 2025-10-20 · Updated 2025-10-20 · CVE-2025-8052

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2

Description A SQL Injection issue exists in opentext Flipper. The issue could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. The vulnerability allows SQL Injection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-564

Related Identifiers

CVE-2025-8052

Affected Products

Opentext Flipper

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-8052 · Security Note
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850533 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8052 · Vendor Advisory
• https://twitter.com/CVEnew/status/1980367940970308063 · Twitter Post
• https://t.me/CVEtracker/35348 · Telegram Post