CVE-2025-12865: e-Excellence｜U-Office Force - SQL Injection
U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
e-Excellence U-Office Forceto a version that resolves this vulnerability.Fixed in 29.50
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12865?
CVE-2025-12865 is considered a high severity vulnerability due to its potential impact on database integrity.
How do I fix CVE-2025-12865?
To fix CVE-2025-12865, ensure that input validation and prepared statements are implemented to prevent SQL injection.
Who is affected by CVE-2025-12865?
CVE-2025-12865 affects users of the e-Excellence U-Office Force application.
What types of attacks can occur due to CVE-2025-12865?
Exploiting CVE-2025-12865 can allow attackers to read, modify, or delete sensitive database information.
Is CVE-2025-12865 an authenticated vulnerability?
Yes, CVE-2025-12865 requires authentication for an attacker to exploit the SQL injection vulnerability.