VDB
CVE-2025-53064
CVE-2025-53064
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
EPSS 0.03% · 10.3th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.03%
10.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Oracle Applications Framework | 12.2.3 |
| oracle | applications_framework | 12.2.3, 12.2.3 |
Timeline
- Oct 21, 2025 Coalition ESS Score
- Oct 21, 2025 CVE Published
- Oct 22, 2025 EPSS Score
- Oct 22, 2025 Coalition ESS Score
- Oct 22, 2025 CVE Updated
- Oct 23, 2025 Coalition ESS Score
- Oct 24, 2025 Coalition ESS Score
- Oct 28, 2025 EPSS Score
- Oct 28, 2025 Coalition ESS Score
- Oct 30, 2025 Coalition ESS Score
- Nov 3, 2025 EPSS Score
- Nov 9, 2025 EPSS Score
References
- Oracle Advisory vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-53064 advisory