by Kastro
Paper/Archive/CVE-2025-53037

CVE-2025-53037

Oracle Corporation Oracle Financial Services Analytical Applications Infrastructure — Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (…

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.6.406 × 208.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected

ProductAffectedFixed inSource
Oracle Financial Services Analytical Applications Infrastructure8.0.7.9–CNA
Oracle Financial Services Analytical Applications Infrastructure8.0.8.7–CNA
Oracle Financial Services Analytical Applications Infrastructure8.1.2.5–CNA

Scores by source

oracle (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryoracle.com/security-alerts/cpuoct2025.html