Product by Google Cloud
Looker
10 known vulnerabilities in Looker (Google Cloud), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-12155 | Command Injection in Looker | — | |
| High | CVE-2026-15810 | Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover | — | |
| Critical | CVE-2025-12414 | Looker account compromise via punycode homograph attack | — | |
| High | CVE-2025-12739 | Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise | — | |
| High | CVE-2025-12741 | Arbitrary File Write in Denodo dialect of Looker allows Remote Code Execution | — | |
| High | CVE-2025-12740 | Remote Command Execution in Looker via IBM DB2 JDBC drive | — | |
| High | CVE-2025-12742 | Remote Code Execution in Looker via Teradata JDBC Driver | — | |
| High | CVE-2025-12472 | Remote Code Execution in Looker due to Improperly Validated Directory Deletion | — | |
| Medium | CVE-2025-12743 | SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database | — | |
| Medium | CVE-2024-5166 | Insecure Direct Object Reference In Looker | 6.5 |