CVE-2025-53036
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform). Affected versions are 8.0.7.9, 8.0.8.7, and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts).
Risk Assessment
An unauthenticated attacker can gain access to critical financial data, potentially leading to confidentiality breaches and impact on other products.
Recommendation
Apply patches provided by Oracle for versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. Restrict network access to the system.
Other vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure
See all- CVE-2025-53037Critical
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- CVE-2025-61756High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: System Configuration) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS).
- CVE-2025-61751High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An authenticated low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to data.
- CVE-2025-53035Medium
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data.
- CVE-2025-53034Medium
A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (part of Oracle Financial Services Applications) in the Platform component. Affects versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. An unauthenticated attacker can access via HTTP, requiring user interaction, and gain unauthorized read and modify access to some data.
Original NVD description (English source)
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. While the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS