CVE-2025-12486 is a high-severity vulnerability in Heimdall Data Database Proxy that allows remote attackers to execute arbitrary code via a cross-site scripting (XSS) flaw in the handling of database event logs. Exploitation requires minimal user interaction and enables attackers to run scripts in the context of the targeted user, potentially compromising confidentiality, integrity, and availability.