GCVE-110-NCSC-2025-335

Advisory PublishedCVSS 8.2/10

Vulnetix · Advisory published October 23, 2025

Recent vulnerabilities in Oracle WebCenter Forms Recognition and Apache CXF expose systems to data compromise and denial of service risks, with CVSS scores indicating significant impacts on confidentiality, integrity, and availability.

Download JSON Open in Console

Weaknesses (CWE)

CWE-400Uncontrolled Resource ConsumptionCWE-20Improper Input ValidationCWE-392Missing Report of Error ConditionCWE-770Allocation of Resources Without Limits or ThrottlingCWE-284Improper Access ControlCWE-267Privilege Defined With Unsafe Actions

Risk Scores

CVSS 3.1

8.2/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2024-12797 CVE-2024-47554 CVE-2024-7254 CVE-2025-25193 CVE-2025-48795 CVE-2025-48976 CVE-2025-53049 CVE-2025-61754

References

advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON