Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-5154

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

  • Published: May 25, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-5154
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.3
  • AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 1.4
  • AV:L/AC:L/Au:M/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
phonepe / phonepe 25.03.21.0 25.03.21.0.x