SQL Injection Vulnerability in Delinea Inc. Cloud Suite and Privileged Access Service

CVE-2025-12812

What is CVE-2025-12812?

An SQL injection vulnerability exists in Delinea Inc.'s Cloud Suite and Privileged Access Service. This flaw arises from improper neutralization of special elements used in SQL commands, allowing attackers to execute arbitrary SQL queries. Exploiting this vulnerability could enable unauthorized access to sensitive information, compromising the integrity and confidentiality of the data managed by these services. Delinea has addressed this issue in version 25.1 of Cloud Suite. It is crucial for users of the affected products to upgrade to the latest version to mitigate this risk.

References