Skip to content
OpenAdvisories
Low · 1.0 CVE-2025-8052 EUVD-2025-35106GHSA-7x66-29g6-cq28

HQL Injection vulnerability has been discovered in Opentext Flipper.

Published Oct 20, 2025 · Updated Oct 21, 2025 · Assigned by OpenText

Description

SQL Injection vulnerability in opentext Flipper allows SQL Injection. 

The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor.

This issue affects Flipper: 3.1.2.

Affected products

VendorProductAffectedFixed
opentext Flipper 3.1.2 —

References