VDB
CVE-2025-62481
CVE-2025-62481
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
EPSS 0.09% · 24.9th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.09%
24.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| oracle | marketing | 12.2.3, 12.2.3 |
| Oracle Corporation | Oracle Marketing | 12.2.3 |
Timeline
- Oct 21, 2025 Coalition ESS Score
- Oct 21, 2025 CVE Published
- Oct 21, 2025 PoC Published
- Oct 21, 2025 PoC Published
- Oct 22, 2025 EPSS Score
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 22, 2025 PoC Published
- Oct 23, 2025 PoC Published
- Oct 24, 2025 PoC Published
- Oct 24, 2025 CVE Updated
References
- Oracle Advisory vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-62481 advisory