CVE-2025-53037
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Risk Assessment
With a CVSS score of 9.8, this vulnerability can lead to full takeover of the infrastructure, impacting confidentiality, integrity, and availability.
Recommendation
Immediately apply the available Oracle patches for versions 8.0.7.9, 8.0.8.7, and 8.1.2.5.
Other vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure
See all- CVE-2025-61756High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: System Configuration) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS).
- CVE-2025-61751High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An authenticated low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to data.
- CVE-2025-53036High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform). Affected versions are 8.0.7.9, 8.0.8.7, and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts).
- CVE-2025-53034Medium
A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (part of Oracle Financial Services Applications) in the Platform component. Affects versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. An unauthenticated attacker can access via HTTP, requiring user interaction, and gain unauthorized read and modify access to some data.
Original NVD description (English source)
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS