Vulnerabilities fixed in Oracle E-Business Suite

🗓️ 23 Oct 2025 13:23:20Reported by NCSCType

Oracle fixed vulnerabilities in enterprise suite versions 12.2.3 to 12.2.14 across iStore, Product Hub, Workflow, Applications Manager, and Marketing, allowing unauthenticated web access.

Reporter	Title	Published	Views	Family All 95
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Marketing	3 Nov 202512:45	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Marketing	27 Oct 202516:13	–	githubexploit
GithubExploit	Exploit for CVE-2025-53072	22 Oct 202509:25	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Marketing	3 Nov 202512:38	–	githubexploit
BDU FSTEC	The vulnerability of the Item Catalog component of the Oracle Product Hub data management software in the Oracle E-Business Suite system allows a malicious individual to gain access to read, modify, or delete data.	27 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to gain full control over the application. This component is part of the Oracle E-Business Suite, which serves as a system for automating business operations.	27 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Shopping Cart component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores. This vulnerability exists in the Oracle E-Business Suite, a software solution for automating business operations. It allows attackers to gain access to read, modify, or delete data.	27 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.	17 Nov 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Application Logging Interfaces component in the Oracle Applications Manager allows a malicious actor to gain access to read, modify, and delete data.	15 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow system, a process management system for automating business activities within the Oracle E-Business Suite. This component allows an intruder to gain access to read, modify, and delete data.	15 Dec 202500:00	–	bdu_fstec

Source	Link
oracle	www.oracle.com/security-alerts/cpuoct2025.html

23 Oct 2025 13:23Current

7High risk

Vulners AI Score7

CVSS 3.19.8

EPSS0.00652

SSVC