CVE-2026-12397

creationtimestamp| type| source ---|---|--- 2026-07-13 07:37:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6ostdds2z...

CVE-2025-12397

creationtimestamp| type| source ---|---|--- 2025-11-10 09:38:06+00:00| seen| https://bsky.app/profile/potato.software/post/3m5bd6w4g3u2i 2025-11-10 09:58:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bedhqwb22x 2025-11-10 12:11:07+00:00| seen|...

CVE-2025-12397

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability was patched on 21 Ju...

CVE-2025-12397 SQL Injection in Looker Studio

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability was patched on 21 Ju...

CVE-2025-12397

CVE-2025-12397 is a SQL injection vulnerability in Looker Studio that affects reports using BigQuery as the data source. A Looker Studio user with report view access could inject malicious SQL that runs with the report owner’s permissions. The issue’s impact is tied to the data source and report ...

Security Bulletin: Vulnerabilities in Quarkus-HTTP affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in Quarkus-HTTP has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-12397 DESCRIPTION: A...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.6.0, <=1.6.20), com.github.adminfaces:quarkus-omnifaces (>=1.1.0, <=1.3.0) +137 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.18.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.18.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.6.0, =1.1.0, =1.1.0,...

com.alibaba.csp:sentinel-jax-rs-quarkus-adapter-deployment (>=1.8.0, <=1.8.10), com.blazebit:blaze-persistence-examples-quarkus-base (1.5.0-alpha2) +38 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.6.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - com.alibaba.csp:sentinel-jax-rs-quarkus-adapter-deployment =1.8.0, =1.4.0.final,...

io.quarkus.http:quarkus-http-servlet (3.0.10.final), io.quarkus.http:quarkus-http-websockets-jsr (3.0.10.final) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.10.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.10.final -...

com.github.mcollovati:quarkus-hilla-deployment (1.0.0-alpha1), com.vaadin:vaadin-quarkus (>=1.0.1, <=1.1.3) +164 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.1.4)

io.quarkus.http:quarkus-http-core MAVEN version 4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - com.github.mcollovati:quarkus-hilla-deployment 1.0.0-alpha1 - com.vaadin:vaadin-quarkus =1.0....

fr.lixbox.lixbox-cache:lixbox-cache-ui (11.1.2.23), fr.lixbox.lixbox-param:lixbox-param-ui (11.1.2.24) +50 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.1.7)

io.quarkus.http:quarkus-http-core MAVEN version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - fr.lixbox.lixbox-cache:lixbox-cache-ui 11.1.2.23 - fr.lixbox.lixbox-param:lixbox-param-ui...

br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0), com.blazebit:blaze-persistence-examples-quarkus-base (1.6.0-alpha2) +48 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.15.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - br.com.labbs:quarkus-monitor-deployment =0.1.5, =1.7.6.final, =0.0.9, =1.7.6.final,...

CVE-2024-12397 vulnerabilities

Vulnerabilities for packages: apicurio-registry, keycloak...

CVE-2024-12397 vulnerabilities

Vulnerabilities for packages: apicurio-registry, keycloak...

CVE-2024-12397

creationtimestamp| type| source ---|---|--- 2024-12-12 09:08:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113639063433232775 2024-12-12 11:19:28+00:00| seen| https://t.me/cvedetector/12759 2025-03-19 17:20:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8096 2025-05-02...

CVE-2024-12397

CVE-2024-12397 describes a flaw in Quarkus-HTTP where cookies with certain value-delimiting characters are parsed incorrectly in incoming requests. This can allow an attacker to craft a cookie value to exfiltrate HttpOnly cookies or spoof additional cookie values, impacting data confidentiality a...

CVE-2024-12397 Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling

A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorize...

Mageia: Security Advisory (MGASA-2020-0209)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Security Advisory (MFSA2018-26) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

SUSE: Security Advisory (SUSE-SU-2018:3656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...