GCVE-110-NCSC-2025-331

Advisory PublishedCVSS 6.1/10

Vulnetix · Advisory published October 23, 2025

A vulnerability in Oracle E-Business Suite's iStore component (versions 12.2.5-12.2.14) allows unauthenticated attackers to compromise the system, with a CVSS score of 6.1 indicating significant confidentiality and integrity risks.

Download JSON Open in Console

Weaknesses (CWE)

CWE-284Improper Access ControlCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-306Missing Authentication for Critical FunctionCWE-601URL Redirection to Untrusted Site ('Open Redirect')

Risk Scores

CVSS 3.1

6.1/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2025-53041 CVE-2025-53043 CVE-2025-53052 CVE-2025-53058 CVE-2025-53064 CVE-2025-53071 CVE-2025-53072 CVE-2025-61753 CVE-2025-62481

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON