CVE-2025-62480
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in the Oracle ZFS Storage Appliance Kit product (component: Naming Subsystem). The supported version affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit, resulting in unauthorized ability to cause a partial denial of service. CVSS 3.1 Base Score 2.7 (Availability impacts).
Risk Assessment
Partial denial of service could lead to limited availability of services, potentially affecting the storage system's operation.
Recommendation
Apply patches provided by Oracle and restrict network access to the system to trusted users only.
Other vulnerabilities in Oracle ZFS Storage Appliance Kit
See all- CVE-2025-62476Medium
Vulnerability in Oracle ZFS Storage Appliance Kit (component: Remote Replication) affecting version 8.8. A high-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the appliance.
- CVE-2025-62290High
Vulnerability in Oracle ZFS Storage Appliance Kit (Block Storage component) version 8.8. A high privileged attacker with network access via HTTP can compromise the appliance, potentially leading to full takeover. CVSS 7.2.
Original NVD description (English source)
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS