CVE-2025-12864

HighCVSS 8.8

Published: 10/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

SQL Injection vulnerability in U-Office Force by e-Excellence allows an authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Risk Assessment

An attacker could gain full control over the database, leading to compromise of confidentiality, integrity, and availability of organizational data.

Recommendation

Apply vendor patches and implement input validation and parameterized queries in the application.

Other vulnerabilities in U-Office Force

CVE-2025-12865High
U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Original NVD description (English source)

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS