CVE-2025-30729

...

CVE-2025-30727

CVE-2025-30727 affects Oracle E-Business Suite, specifically the iSurvey Module of Oracle Scripting. Affected versions are 12.2.3–12.2.14. The vulnerability allows an unauthenticated, network-based attacker (over HTTP) to compromise Oracle Scripting, with potential takeover described in the CVSS ...

CVE-2025-30724

CVE-2025-30724 is a confirmed vulnerability affecting Oracle BI Publisher (Oracle Analytics, XML Services). Affected versions are 7.6.0.0.0 and 12.2.1.4.0. The issue allows an unauthenticated attacker, over HTTP, to compromise Oracle BI Publisher and potentially obtain unauthorized access to crit...

CVE-2025-30718

...

CVE-2025-30716

...

CVE-2025-30714

...

CVE-2025-30711

CVE-2025-30711 affects Oracle E-Business Suite, Oracle Applications Framework (Attachments, File Upload). Affected: 12.2.3–12.2.14. Vulnerability allows a low-privileged attacker with network access via HTTP to compromise the framework, with human interaction required. Impact per sources: unautho...

CVE-2025-30709

CVE-2025-30709 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected are versions 9.2.0.0–9.2.9.2 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, with successful attacks...

CVE-2025-30704

CVE-2025-30704 affects Oracle MySQL Server (component: Server: Components Services). Affected versions: 8.0.0–8.0.41, 8.4.0–8.4.4, 9.0.0–9.2.0. An attacker with high privileges over the network and via multiple protocols can cause the MySQL Server to hang or crash (DOS). Remediation/mitigation de...

CVE-2025-30703

...

CVE-2025-30698

Summary of CVE-2025-30698 from provided documents: This vulnerability affects Oracle Java SE and Oracle GraalVM variants (Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; GraalVM for JDK: 17.0.14, 21.0.6, 24; GraalVM EE: 20.3.17, 21.3.13) across components such as 2D, JSSE, and Compiler....

CVE-2025-30694

CVE-2025-30694 affects Oracle Database Server’s XML Database component. Affected versions are 19.3–19.26, 21.3–21.17, and 23.4–23.7. The vulnerability is exploitable by a low-privilege user with User Account privilege who has network access via HTTP, with exploitation requiring user interaction. ...

CVE-2025-30692

...

CVE-2025-30690

CVE-2025-30690 affects Oracle Solaris 11, specifically the Filesystem component. The issue allows a high-privilege attacker who has local logon to compromise Solaris, with exploitation requiring user interaction. Attacks can lead to takeover of Oracle Solaris and may impact additional products (s...

CVE-2025-30690

...

CVE-2025-30689

...

CVE-2025-30687

...

CVE-2025-30686

Affected product: Oracle Hospitality Simphony (part of Oracle Food and Beverage Applications) with EMC component. Vulnerable versions: 19.1–19.7. Root cause: flaw in EMC within Simphony that enables a low-privilege, network-access user (HTTP) to access or alter data and cause partial DOS. Impact:...

CVE-2025-30685

...

CVE-2025-30685

CVE-2025-30685 affects Oracle MySQL Server (Replication component). Affects supported versions: 8.0.0–8.0.41, 8.4.0–8.4.4, 9.0.0–9.2.0. An attacker with network access via multiple protocols can cause the MySQL Server to hang or crash (DoS). Root cause: vulnerability in the Replication path as de...