VDB
CVE-2025-21545
CVE-2025-21545
PUBLISHED
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
EPSS 0.51% · 43.5th percentile
Risk Scores
EPSS Score
0.51%
43.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle PeopleSoft 9.2 | |
| Oracle | Oracle PeopleSoft 8.61 | |
| Oracle | Oracle Linux | |
| Oracle | Oracle PeopleSoft 8.60 | |
| SUSE | SUSE Linux |
Timeline
- Jan 17, 2025 CVE Published
- Jan 21, 2025 PoC Published
- Jan 22, 2025 EPSS Score
- Feb 3, 2025 Coalition ESS Score
- Feb 7, 2025 EPSS Score
- Feb 18, 2025 Coalition ESS Score
- Feb 23, 2025 EPSS Score
- Mar 12, 2025 EPSS Score
- Mar 17, 2025 Coalition ESS Score
- Mar 28, 2025 EPSS Score
- Apr 13, 2025 EPSS Score
- Apr 29, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0166.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0166 advisory
- https://www.oracle.com/security-alerts/cpujan2025.html#AppendixPS advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-June/021256.html advisory
- http://linux.oracle.com/errata/ELSA-2026-73519.html advisory