{
  "cveId": "CVE-2025-65104",
  "url": "https://patchblox.com/security/cve/CVE-2025-65104",
  "summary": "CVE-2025-65104 is fixed in firebird3.0 on 1 platform by DEBIAN-CVE-2025-65104 (version 3.0.14.ds7-1), released May 15, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "firebird3.0: Firebird is an open-source relational database management system",
  "description": "Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.",
  "published": "2026-04-17T18:16:30Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.00185,
  "epssPercentile": 0.08138,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firebird3.0",
      "release": "Debian 14",
      "fixedVersion": "3.0.14.ds7-1",
      "fix": "DEBIAN-CVE-2025-65104",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-65104",
      "released": "2026-05-15T16:01:09Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}