VDB
CVE-2025-21530
CVE-2025-21530
PUBLISHED
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
EPSS 0.31% · 54.9th percentile
Risk Scores
EPSS Score
0.31%
54.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle PeopleSoft 8.61 | |
| Oracle | Oracle PeopleSoft 8.60 | |
| Oracle | Oracle PeopleSoft 9.2 | |
| SUSE | SUSE Linux |
Exploit Intelligence
- CIRCL seen: CVE-2025-21530 (circl-sighting)
- Oracle Advisory (circl)
Timeline
- Dec 24, 2024 CVE ID Reserved
- Jan 21, 2025 Coalition ESS Score
- Jan 21, 2025 CVE Published
- Jan 21, 2025 PoC Published
- Jan 22, 2025 EPSS Score
- Jan 22, 2025 Coalition ESS Score
- Feb 6, 2025 EPSS Score
- Feb 18, 2025 Coalition ESS Score
- Feb 22, 2025 EPSS Score
- Mar 9, 2025 EPSS Score
- Mar 14, 2025 CVE Updated
- Mar 19, 2025 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0166.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0166 advisory
- https://www.oracle.com/security-alerts/cpujan2025.html#AppendixPS advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-June/021256.html advisory