GCVE-110-NCSC-2025-33

Advisory PublishedCVSS 6.1/10

Vulnetix · Advisory published January 28, 2025

Oracle heeft kwetsbaarheden verholpen in Oracle E-Business Suite (Specifiek voor de Advanced Outbound Telephony, Project Foundation, Customer Care en Workflow componenten).

Download JSON Open in Console

Weaknesses (CWE)

CWE-352Cross-Site Request Forgery (CSRF)CWE-863Incorrect AuthorizationCWE-281Improper Preservation of Permissions

Risk Scores

CVSS 3.1

6.1/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
oracle	workflow	—	—
oracle	customer_care	—	—
oracle	project_foundation	—	—
oracle	advanced_outbound_telephony	—	—

Aliases

CVE-2025-21489 CVE-2025-21506 CVE-2025-21516 CVE-2025-21541

References

advisory

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON