CVE Catalog
CVE-2025-15688
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.40%
32th percentile - higher than 32% of all known CVEs
Summary
Unauthenticated SQL Injection vulnerability in Capella versions up to 2.5.5. An attacker can manipulate database queries.
Risk Assessment
Risk of unauthorized access to data, modification or deletion, and potential administrator account takeover.
Recommendation
Update the Capella plugin to the latest version that includes the security fix.
Other vulnerabilities in Capella
Original NVD description (English source)
Unauthenticated SQL Injection in Capella <= 2.5.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS