What’s Vulnerable › Vulnerabilities
CVE-2025-3113: Improper Access Control in Delphix Masking Engine
- Severity: critical (CVSS 9.0 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-04-17 · updated 2026-06-17
- Weakness: CWE-284
Description
A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.
Affected products
- Perforce Delphix: before 2025.2.0.1 — fixed in 2025.2.0.1
How to fix
Upgrade to a fixed version: Perforce Delphix 2025.2.0.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-3113 or the next vulnerability affects your stack