CVE-2025-61756
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: System Configuration) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS).
Risk Assessment
Successful exploitation can cause a complete denial of service, disrupting availability of the application. No authentication or user interaction is required.
Recommendation
Apply Oracle patches for versions 8.0.7.9, 8.0.8.7 and 8.1.2.5 and restrict network access to the System Configuration component. Implement rate limiting and availability monitoring.
Other vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure
See all- CVE-2025-53037Critical
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- CVE-2025-61751High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An authenticated low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to data.
- CVE-2025-53036High
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform). Affected versions are 8.0.7.9, 8.0.8.7, and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts).
- CVE-2025-53035Medium
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data.
- CVE-2025-53034Medium
A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (part of Oracle Financial Services Applications) in the Platform component. Affects versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. An unauthenticated attacker can access via HTTP, requiring user interaction, and gain unauthorized read and modify access to some data.
Original NVD description (English source)
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: System Configuration). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS