What’s Vulnerable › Vulnerabilities

CVE-2025-14591: PII Leak Due to Change in EOR Handling

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-20 · updated 2026-06-17
• Weakness: CWE-200

Description

In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF (Windows and DOS) End-of-Record (EOR) characters in delimited files, an issue was identified: using an incorrect EOR configuration can cause inaccurate parsing and leave personally identifiable information (PII) unmasked.

Affected products

• Perforce Delphix Continuous Compliance: from 2025.3.0.0 through 2025.6.0.0

References

• https://portal.perforce.com/s/article/TB137
• https://portal.perforce.com/s/cve/a91Qi000002fThdIAE/pii-leak-due-to-change-in-eor-handling

Get alerted when CVE-2025-14591 or the next vulnerability affects your stack