CVE-2025-3113

critical · 9

A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.

CVSS

0.3%

EPSS (exploit prob.)

26th

EPSS percentile

2025-04-17

Published

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-284

References

https://portal.perforce.com/s/detail/a91PA000001SeefYAC

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-3113