Advisories · Technology

Google Cloud Apigee hybrid Javacallout policy.

Every CVE that names Google Cloud Apigee hybrid Javacallout policy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-13426 CVE record

CVSS 8.7 High

Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution
- Google Cloud Apigee hybrid Javacallout policy
- CWE-913
Not analysed yet 5 Dec 2025