CVE-2025-12864: e-Excellence｜U-Office Force - SQL Injection
U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
e-Excellence U-Office Forceto a version that resolves this vulnerability.Fixed in 29.50
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12864?
CVE-2025-12864 has a high severity level due to its potential for allowing unauthorized access to database contents.
How do I fix CVE-2025-12864?
To fix CVE-2025-12864, you should apply the latest patches provided by e-Excellence for the U-Office Force application.
Who is affected by CVE-2025-12864?
CVE-2025-12864 affects users of e-Excellence U-Office Force who have not implemented mitigation measures against SQL Injection vulnerabilities.
What type of vulnerability is CVE-2025-12864?
CVE-2025-12864 is classified as a SQL Injection vulnerability.
Can CVE-2025-12864 lead to data breaches?
Yes, CVE-2025-12864 can lead to data breaches by allowing attackers to read, modify, and delete database contents.