VDB
CVE-2025-53037
CVE-2025-53037
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
EPSS 0.13% · 32.6th percentile
Risk Scores
CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.13%
32.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| oracle | financial_services_analytical_applications_infrastructure | 8.0.7.9.0, 8.0.8.7.0, 8.1.2.5.0 |
| Oracle Corporation | Oracle Financial Services Analytical Applications Infrastructure | 8.0.7.9, 8.0.8.7, 8.1.2.5 |
Timeline
- Oct 21, 2025 Coalition ESS Score
- Oct 21, 2025 CVE Published
- Oct 22, 2025 EPSS Score
- Oct 22, 2025 Coalition ESS Score
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 22, 2025 CVE Updated
- Oct 23, 2025 Coalition ESS Score
- Oct 24, 2025 Coalition ESS Score
- Oct 25, 2025 Coalition ESS Score
- Oct 28, 2025 EPSS Score
- Oct 30, 2025 Coalition ESS Score
References
- Oracle Advisory vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-53037 advisory