Flipper vulnerabilities

3 known vulnerabilities in Flipper from OpenText. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Flipper: Insufficient Granularity of Access Control

  CVE-2025-8053Oct 20, 2025OpenText

  Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privile

• 8.8 High severity

  Flipper: Use of Hibernate with HQL/SQL Query String Containing External Input

  CVE-2025-8052Oct 20, 2025OpenText

  SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2.

• 8.8 High severity

  Flipper: Insufficient Granularity of Access Control

  CVE-2025-8049Oct 20, 2025OpenText

  Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue af