CVE-2025-30756

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

CVE-2025-30756

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

CVE-2025-30756

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

PT-2025-29607 · Oracle · Oracle Rest Data Services

Name of the Vulnerable Software and Affected Versions: Oracle REST Data Services version 24.2.0 Description: An easily exploitable issue exists in Oracle REST Data Services that allows an unauthenticated attacker with network access via HTTP to compromise the service. Successful attacks require...

Oracle REST Data Services Cross-Site Request Forgery Vulnerability

Oracle REST Data Services is an Oracle middleware tool for exposing Oracle database functionality to applications via a RESTful API. A security vulnerability exists in Oracle REST Data Services version 24.2.0 that originates from an unauthenticated attacker who can attack via HTTP web access,...

CVE-2025-30756: Cross-Site Request Forgery (CSRF)

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

VulnCheck KEV: CVE-2025-25034

A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the SugarRestSerialize.php script. The vulnerable code fails to sanitize the restdata parameter before passing it to the...

CVE-2020-14745

Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...

CVE-2020-14744

Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (2.0.0.beta2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (2.0.0.beta2) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.1.final)

io.quarkus:quarkus-resteasy MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests 2.0.0.beta2 -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (2.0.2.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (2.0.2.final) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 2.0.2.final -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (2.1.2.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (2.1.2.final) +95 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.1.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 2.1.2.final -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (2.2.4.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (2.2.4.final) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.2.4.final)

io.quarkus:quarkus-resteasy MAVEN version 2.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 2.2.4.final -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.7.4.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (1.7.4.final) +17 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.7.4.final)

io.quarkus:quarkus-resteasy MAVEN version 1.7.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 1.7.4.final -...

io.quarkus.extensions:quarkus-extension-catalog (>=1.0.0.alpha5, <=1.0.0.alpha12), io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.5.0.cr1) +19 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.5.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 1.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus.extensions:quarkus-extension-catalog =1.0.0.alpha5, =1.0.0.alpha12 -...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=24.5.0-beta1, <=24.6.0), com.github.mcollovati:quarkus-hilla-deployment (>=24.5.0-beta1, <=24.6.0) +22 more potentially affected by CVE-2025-1247 via io.quarkus:quarkus-rest-deployment (>=3.16.0.cr1, <=3.18.1)

io.quarkus:quarkus-rest-deployment MAVEN version =3.16.0.cr1, =24.5.0-beta1, =24.5.0-beta1, =24.5.0-beta1, =0.38.0, =0.38.0, =3.0.19, =3.0.19, =3.0.19, =3.16.0.cr1, =3.16.0.cr1, =3.16.0.cr1, =3.16.0.cr1, =3.16.0.cr1, =3.16.0.cr1, =3.18.1 and more Source cves: CVE-2025-1247 Source advisory:...

Oracle Critical Patch Update, January 2025 Security Update Review

Oracle released its first quarterly edition of this year’s Critical Patch Update, which received patches for 318 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, includin...

Vulnerabilities fixed in Oracle Database products

Oracle has fixed vulnerabilities in several database products and subsystems, including the Core Database, Grail, Application Express, GoldenGate and REST data. The vulnerabilities are in several components of the Oracle Database, including the Data Mining component and the Java VM. These...

io.quarkiverse.dapr:quarkus-dapr (1.0.3), io.quarkiverse.dapr:quarkus-dapr-deployment (1.0.3) +50 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.14.2.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.14.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkiverse.dapr:quarkus-dapr 1.0.3 -...

com.github.mcollovati:quarkus-hilla (>=1.0.0, <=1.0.1), com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0, <=1.0.1) +58 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.16.10.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.16.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - com.github.mcollovati:quarkus-hilla =1.0.0, =1.0.0, =1.0.1 -...