Latest CVE Feed
- 
                                
                                
9.8
CRITICALCVE-2025-61757
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac... Read more
Affected Products : identity_manager- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
3.7
LOWCVE-2025-61755
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.16 and 21.0.8. Difficult to exploit vulnerability allows unauthenticated attacker with net... Read more
Affected Products : graalvm_for_jdk- Published: Oct. 21, 2025
 - Modified: Oct. 27, 2025
 
 - 
                                
                                
6.5
MEDIUMCVE-2025-61754
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via ... Read more
Affected Products : bi_publisher- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
6.1
MEDIUMCVE-2025-61753
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to... Read more
Affected Products : scripting- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
7.5
HIGHCVE-2025-61752
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v... Read more
Affected Products : weblogic_server- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
8.1
HIGHCVE-2025-61751
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vuln... Read more
Affected Products : financial_services_analytical_applications_infrastructure- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
4.3
MEDIUMCVE-2025-61750
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ... Read more
Affected Products : peoplesoft_enterprise_peopletools- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
2.7
LOWCVE-2025-61749
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compro... Read more
- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
3.7
LOWCVE-2025-61748
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Orac... Read more
- Published: Oct. 21, 2025
 - Modified: Oct. 28, 2025
 
 - 
                                
                                
9.8
CRITICALCVE-2025-53072
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access ... Read more
Affected Products : marketing- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
4.3
MEDIUMCVE-2025-53071
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network a... Read more
Affected Products : applications_framework- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
5.5
MEDIUMCVE-2025-53070
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris e... Read more
- Published: Oct. 21, 2025
 - Modified: Oct. 27, 2025
 
 - 
                                
                                
4.9
MEDIUMCVE-2025-53069
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with... Read more
Affected Products : mysql_server- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
6.5
MEDIUMCVE-2025-53068
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris execut... Read more
- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
4.9
MEDIUMCVE-2025-53067
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to... Read more
Affected Products : mysql_server- Published: Oct. 21, 2025
 - Modified: Oct. 24, 2025
 
 - 
                                
                                
7.5
HIGHCVE-2025-53066
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle G... Read more
- Published: Oct. 21, 2025
 - Modified: Nov. 03, 2025
 
 - 
                                
                                
5.4
MEDIUMCVE-2025-53065
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with net... Read more
Affected Products : peoplesoft_enterprise_peopletools- Published: Oct. 21, 2025
 - Modified: Oct. 23, 2025
 
 - 
                                
                                
4.3
MEDIUMCVE-2025-53064
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network acce... Read more
Affected Products : applications_framework- Published: Oct. 21, 2025
 - Modified: Oct. 28, 2025
 
 - 
                                
                                
5.4
MEDIUMCVE-2025-53063
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with netw... Read more
Affected Products : peoplesoft_enterprise_peopletools- Published: Oct. 21, 2025
 - Modified: Oct. 23, 2025
 
 - 
                                
                                
4.9
MEDIUMCVE-2025-53062
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via m... Read more
Affected Products : mysql_server- Published: Oct. 21, 2025
 - Modified: Oct. 28, 2025