VDB
CVE-2025-53071
CVE-2025-53071
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
EPSS 0.03% · 10.3th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.03%
10.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| oracle | applications_framework | 12.2.3, 12.2.3 |
| Oracle Corporation | Oracle Applications Framework | 12.2.3 |
Timeline
- Oct 21, 2025 Coalition ESS Score
- Oct 21, 2025 CVE Published
- Oct 22, 2025 EPSS Score
- Oct 22, 2025 CVE Updated
- Oct 28, 2025 EPSS Score
- Nov 3, 2025 EPSS Score
- Nov 9, 2025 EPSS Score
- Nov 9, 2025 Coalition ESS Score
- Nov 14, 2025 EPSS Score
- Nov 20, 2025 EPSS Score
- Nov 26, 2025 EPSS Score
- Dec 2, 2025 EPSS Score
References
- Oracle Advisory vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-53071 advisory