CVE-2025-50090

Oracle E-Business Suite - Oracle Applications Framework Personalization vulnerability (CVE-2025-50090) affects 12.2.3–12.2.14. A low-privileged, network-access attacker can exploit via HTTP with user interaction to cause unauthorized data modification, insertion, deletion, or read access. Root ca...

CVE-2025-50087

...

CVE-2025-50083

...

CVE-2025-50078

...

CVE-2025-50078

Removed by vendor...

CVE-2025-50076

CVE-2025-50076 concerns Oracle MySQL Server, specifically the DML component. Affected steady-state versions are 8.0.0–8.0.25. The vulnerability can be exploited by a low-privilege, network-authenticated attacker via multiple protocols to cause a hang or crash (complete DoS) of MySQL Server. The b...

CVE-2025-50072

...

CVE-2025-50069

...

CVE-2025-50066

...

CVE-2025-30762

...

CVE-2025-30756

...

CVE-2025-30756

...

CVE-2025-30754

CVE-2025-30754 affects Oracle Java SE and Oracle GraalVM (JSSE) with multiple affected versions across Java SE and GraalVM variants. Affected: Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; GraalVM for JDK 17.0.15, 21.0.7, 24.0.1; GraalVM Enterprise Edition 21.3.14. The vulnerabilit...

CVE-2025-30752

...

CVE-2025-30752

CVE-2025-30752 affects Oracle Java SE and Oracle GraalVM for JDK 24.0.1 (Compiler component). The vulnerability allows unauthenticated network access to cause a partial denial of service (Availability impact: LOW) in Java deployments that run untrusted code in sandboxed environments. Affects clie...

CVE-2025-30751

...

CVE-2025-30748

...

CVE-2025-30744

CVE-2025-30744 affects Oracle E-Business Suite (Oracle Mobile Field Service, component Multiplatform Sync Errors). Affected versions are 12.2.3–12.2.13. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to cause unauthorized creation, deletion, or modification of data,...

CVE-2025-30739

The CVE-2025-30739 entry concerns Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation component (Preferences). Affected are CRM Technical Foundation versions 12.2.11–12.2.13. The issue enables a high-privilege attacker, with network access over HTTP, to compromise data in Or...

CVE-2025-53905

creationtimestamp| type| source ---|---|--- 2025-07-15 18:42:26+00:00| seen| https://seclists.org/oss-sec/2025/q3/40 2025-07-20 19:58:16+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lugb5tvae72e 2025-07-20 21:09:32+00:00| seen|...