CVEvulnerability

CVE-2025-30751

8.8 HIGH Published 2025-07-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-863

Description

Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Oracle Database. Successful attacks of this vulnerability can result in takeover of Oracle Database. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected configurations

• oracle database server (>= 19.3 <= 19.27) • oracle database server (>= 23.4 <= 23.8)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References