VDB

GCVE-110-NCSC-2025-124

GCVE-110-NCSC-2025-124
Advisory PublishedCVSS 6.5/10
Vulnetix · Advisory published April 16, 2025
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Download JSON Open in Console

Weaknesses (CWE)

CWE-208Observable Timing DiscrepancyCWE-400Uncontrolled Resource ConsumptionCWE-732Incorrect Permission Assignment for Critical ResourceCWE-121Stack-based Buffer OverflowCWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-834Excessive IterationCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-1286Improper Validation of Syntactic Correctness of InputCWE-20Improper Input ValidationCWE-392Missing Report of Error ConditionCWE-917Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')CWE-1333Inefficient Regular Expression ComplexityCWE-345Insufficient Verification of Data AuthenticityCWE-611Improper Restriction of XML External Entity ReferenceCWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-670Always-Incorrect Control Flow ImplementationCWE-669Incorrect Resource Transfer Between SpheresCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-639Authorization Bypass Through User-Controlled KeyCWE-770Allocation of Resources Without Limits or ThrottlingCWE-404Improper Resource Shutdown or ReleaseCWE-94Improper Control of Generation of Code ('Code Injection')CWE-772Missing Release of Resource after Effective LifetimeCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-303Incorrect Implementation of Authentication AlgorithmCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-653Improper Isolation or CompartmentalizationCWE-502Deserialization of Untrusted DataCWE-1336Improper Neutralization of Special Elements Used in a Template EngineCWE-862Missing Authorization

Risk Scores

CVSS 3.1
6.5/10
Medium · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersionsPlatforms
Oraclevers:oracle/12.0.6.0.0——
Oraclevers:oracle/>=7.5.0|<=7.5.1——
Oraclevers:unknown/24.2.5——
Oraclevers:unknown/9.0.2——
Oraclevers:unknown/4.1.0——
Oraclevers:oracle/15.0.1——
Oraclevers:oracle/>=23.4.0|<=23.4.1——
Oraclevers:oracle/>=9.0.0|<=9.0.3——
Oraclevers:oracle/4.1.0——
Oraclevers:oracle/>=6.0|<=6.1——
Oraclevers:oracle/>=12.0.0.4.0|<=12.0.0.8.0——
Oraclevers:oracle/8.1.0.26.0——
Oraclevers:oracle/9.0.0.0——
Oraclevers:unknown/9.3.0——
Oracle Corporationvers:semver/7.5.0——
Oraclevers:oracle/>=24.1.0|<=24.3.0——
Oraclevers:oracle/>=23.4.0|<=23.4.5——
Oraclevers:oracle/9.0.0——
Oraclevers:oracle/>=6.0.0|<=6.0.5——
Oraclevers:unknown/9.1.1.9——
Oraclevers:oracle/8.1.0.2.0——
Oraclevers:oracle/24.2.0——
Oraclevers:oracle/23.4.4——
Oraclevers:oracle/8.0.0.4.0——
Oraclevers:unknown/>=9.0.0|<=9.0.3——
Oraclevers:oracle/9.0.2——
Oraclevers:oracle/8.0.0.3——
Oraclevers:unknown/4.2.0——
Oraclevers:oracle/12.11——
Oracle Corporationvers:semver/7.4.1——
Oraclevers:oracle/>=7.4.0|<=7.4.2——
Oraclevers:oracle/5.1——
Oracle Corporationvers:semver/7.4.0——
Oraclevers:unknown/24.2.3——
Oraclevers:oracle/6.3.1——
Oraclevers:oracle/>=12.0.0.4|<=12.0.0.8——
Oraclevers:oracle/15.0.2——
Oraclevers:oracle/8.1.0.1——
Oraclevers:unknown/24.3.0——
Oraclevers:oracle/>=23.4.0|<=23.4.6——
Oraclevers:unknown/>=6.0|<=6.1——
Oraclevers:oracle/25.1.100——
Oraclevers:unknown/24.2.2——
Oraclevers:oracle/9.3.0——
Oraclevers:oracle/>=23.1.0|<=23.4.0——
Oraclevers:oracle/7.6.0——
Oraclevers:oracle/>=15.0.0.0|<=15.0.0.1——
Oraclevers:unknown/24.2.0——
Oraclevers:oracle/24.3.0——
Oraclevers:oracle/24.2.1——
Oraclevers:oracle/23.4.2——
Oraclevers:unknown/10.0.0——
Oraclevers:oracle/7.5.0——
Oraclevers:unknown/15.0.0.0.0——
Oraclevers:unknown/9.2.0——
Oraclevers:oracle/7.4.1——
Oraclevers:oracle/>=24.2.1|<=24.2.4——
Oraclevers:oracle/24.2.5——
Oraclevers:oracle/10.0.0——
Oraclevers:unknown/9.0.0——
Oraclevers:unknown/>=24.2.0|<=24.2.2——
Oraclevers:oracle/12.0.0.8.0——
Oraclevers:oracle/15.0.0——
Oraclevers:oracle/>=23.4.0|<=23.4.2——
Oraclevers:oracle/9.0.3——
Oraclevers:oracle/24.1.0——
Oraclevers:oracle/23.4.3——
Oraclevers:oracle/15.0.1.0.0——
Oraclevers:oracle/6.0——
Oraclevers:oracle/23.4.0——
Oraclevers:oracle/7.3.6——
Oraclevers:oracle/7.4.0——
Oraclevers:oracle/5.2——
Oraclevers:oracle/>=6.0.4|<=6.0.5——
Oraclevers:oracle/24.2.3——
Oraclevers:oracle/>=15.0.0.0.0|<=15.0.1.0.0——
Oraclevers:oracle/9.1.1.9——
Oraclevers:oracle/15.0.0.0.0——
Oraclevers:oracle/24.2.4——
Oraclevers:oracle/9.2.0——
Oraclevers:oracle/7.4.2——
Oraclevers:oracle/24.1.1——
Oraclevers:oracle/24.2.2——
Oraclevers:oracle/>=23.4.0|<=23.4.3——
Oraclevers:oracle/9.0.1——
Oraclevers:oracle/7.5.1——
Oraclevers:oracle/7.7.0——
Oraclevers:unknown/9.0.1——
Oraclevers:oracle/14.0——
Oraclevers:oracle/>=23.4.0|<=23.4.4——
Oraclevers:oracle/4.2.0——
Oraclevers:oracle/15.0——
Oraclevers:oracle/>=24.2.0|<=24.2.4——
Oraclevers:oracle/14.0.0——
Oraclevers:oracle/46.6——
Oraclevers:oracle/22.4.0——
Oraclevers:unknown/9.0.3——
Oraclevers:oracle/>=24.2.0|<=24.2.2——
Oraclevers:unknown/24.2.1——

Aliases

CVE-2023-49582CVE-2023-51074CVE-2023-5388CVE-2023-5685CVE-2024-11053CVE-2024-1135CVE-2024-12797CVE-2024-12798CVE-2024-21538CVE-2024-25638CVE-2024-28168CVE-2024-28219CVE-2024-28834CVE-2024-31141CVE-2024-34064CVE-2024-35195CVE-2024-37891CVE-2024-38819CVE-2024-38827CVE-2024-40896CVE-2024-4227CVE-2024-43044CVE-2024-43709CVE-2024-43796CVE-2024-47072CVE-2024-47554CVE-2024-49767CVE-2024-50602CVE-2024-52046CVE-2024-52303CVE-2024-53122CVE-2024-5535CVE-2024-56128CVE-2024-56337CVE-2024-57699CVE-2024-6763CVE-2024-7254CVE-2025-1974CVE-2025-23084CVE-2025-23184CVE-2025-24813CVE-2025-24928CVE-2025-24970CVE-2025-27516CVE-2025-27789CVE-2025-30729CVE-2025-31721

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›