What is CVE-2025-0982?

CVE-2025-0982 is a critical-severity vulnerability in Google Application_integration, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 10.0/10. Published 2025-02-06.

How severe is CVE-2025-0982?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Vulnerability in Google Application_integration

CVE-2025-0982

Sandbox escape in the JavaScript Task feature of Google Cloud Application Integration allows an actor to execute arbitrary unsandboxed code via crafted JavaScript code executed by the Rhino engine. Effective January 24, 2025, Application I…

EPSS: 0.002 (15.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Google Application_integration
Google Cloud Application Integration — versions 0

Weakness classification (CWE)

CWE-829 — Inclusion of Functionality from Untrusted Control Sphere

References

cve-coordination@google.com (Release Notes)

Frequently asked questions

What is CVE-2025-0982?: CVE-2025-0982 is a critical-severity vulnerability in Google Application_integration, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 10.0/10. Published 2025-02-06.
How severe is CVE-2025-0982?: Critical severity. CVSS v3 base score is 10.0 out of 10.