VDB
CVE-2025-53072
CVE-2025-53072
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
EPSS 0.11% · 29.5th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.11%
29.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| oracle | marketing | 12.2.3, 12.2.3 |
| Oracle Corporation | Oracle Marketing | 12.2.3 |
Timeline
- Oct 21, 2025 Coalition ESS Score
- Oct 21, 2025 CVE Published
- Oct 22, 2025 EPSS Score
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 23, 2025 PoC Published
- Oct 24, 2025 PoC Published
- Oct 25, 2025 Coalition ESS Score
- Oct 26, 2025 Coalition ESS Score
References
- Oracle Advisory vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-53072 advisory