CVE Catalog

CVE-2025-61021

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile — higher than 27% of all known CVEs

Summary

An issue in the sqlo_natural_join_cond component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Risk Assessment

A DoS attack can lead to service unavailability, affecting the organization's operational continuity and potentially causing financial losses.

Recommendation

It is recommended to update to the latest version of the software to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

An issue in the sqlo_natural_join_cond component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS