CVE-2025-12865

HighCVSS 8.8

Published: 10/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Risk Assessment

An attacker could access sensitive data, make unauthorized changes, or delete data, potentially compromising the integrity and confidentiality of information.

Recommendation

Update U-Office Force to a version containing the fix or apply mitigations such as input validation and limiting database privileges.

Other vulnerabilities in U-Office Force

CVE-2025-12864High
SQL Injection vulnerability in U-Office Force by e-Excellence allows an authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Original NVD description (English source)

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS