CVE-2025-50074

MediumCVSS 4.9

Published: 21/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

Vulnerability in Oracle Financial Services Revenue Management and Billing (component: Security Management System) in versions 2.9.0.0.0–7.2.0.0.0. Allows a high-privileged attacker with network access via HTTP to gain unauthorized access to critical data. CVSS 3.1 Base Score 4.9.

Risk Assessment

A high-privileged attacker can access all data available in the system, potentially leading to confidentiality breach. However, administrative privileges are required.

Recommendation

Apply security updates provided by Oracle. Restrict network access to the HTTP interface and regularly review user privileges.

Other vulnerabilities in Oracle Financial Services Revenue Management and Billing

CVE-2025-50075Medium
Vulnerability in Oracle Financial Services Revenue Management and Billing (component: Security Management System) affecting versions 2.9.0.0.0–7.2.0.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in the application.

Original NVD description (English source)

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Security Management System). Supported versions that are affected are 2.9.0.0.0-7.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS