Critical severity · published Apr 17, 2025
CVE-2025-3113
Improper Access Control in Delphix Masking Engine
9.0
CVSS
0.3%
EPSS
No
On KEV
Description
A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Delphix · Perforce
before 2025.2.0.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3113
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3113
portal.perforce.com
https://portal.perforce.com/s/detail/a91PA000001SeefYAC
More from Delphix
8.5
CVE-2025-2903
Privilege Chaining in Delphix
