What is CVE-2025-13428?

CVE-2025-13428 is a high-severity vulnerability in Google Security_operations_soar, classified under Improper Input Validation. CVSS score: 7.2/10. Published 2025-12-09.

How severe is CVE-2025-13428?

High severity. CVSS v3 base score is 7.2 out of 10.

Improper input validation in Google Security_operations_soar

CVE-2025-13428

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution (RCE) in the server. The flaw stemmed from weak validation of uploaded Pyth…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Google Security_operations_soar
Google Cloud Secops Soar — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

f45cbf4e-4146-4068-b7e1-655ffc2c548c (Vendor Advisory)

Frequently asked questions

What is CVE-2025-13428?: CVE-2025-13428 is a high-severity vulnerability in Google Security_operations_soar, classified under Improper Input Validation. CVSS score: 7.2/10. Published 2025-12-09.
How severe is CVE-2025-13428?: High severity. CVSS v3 base score is 7.2 out of 10.