VDB
GCVE-110-NCSC-2025-131
GCVE-110-NCSC-2025-131
Advisory PublishedCVSS 9.1/10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses (CWE)
CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-416Use After FreeCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-400Uncontrolled Resource Consumption
Risk Scores
CVSS 3.1
9.1/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Oracle Corporation | vers:semver/9.2.0.0|<=9.2.9.2 | — | — |
| Oracle | vers:oracle/>=9.2.0.0|<=9.2.9.2 | — | — |
| Oracle | vers:unknown/9.2.0.0-9.2.9.2 | — | — |
| Oracle | vers:unknown/>=9.2.0.0|<=9.2.9.2 | — | — |
Browse GCVE Records
74,198 records in the GCVE database · Updated July 21, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.