VYPR

Looker Studio

by Google

CVEs (2)

  • CVE-2025-12405HigNov 10, 2025
    risk 0.50cvss —epss 0.00

    An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors. A Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored…

  • CVE-2025-12397HigNov 10, 2025
    risk 0.49cvss —epss 0.00

    A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability…