CVE-2025-62592

...

CVE-2025-62587

...

CVE-2025-62588

...

CVE-2025-62588

CVE-2025-62588 affects Oracle VM VirtualBox (Core) with affected versions 7.1.12 and 7.2.2. Reported as a local, high-privilege vulnerability enabling takeover of Oracle VM VirtualBox; impact spans confidentiality, integrity, and availability (CVSS 3.1 base score 8.2). Connected documents corrobo...

CVE-2025-62480

...

CVE-2025-62476

...

CVE-2025-62478

...

CVE-2025-62476

...

CVE-2025-62289

CVE-2025-62289 concerns Oracle ZFS Storage Appliance Kit (Oracle Systems) with the Filesystems component. Affected version 8.8 is described as vulnerable to a network-accessible, HTTP-based attack by a high-privilege attacker that can cause a hang or repeated crashes (complete DOS). The CVSS 3.1 ...

CVE-2025-62289

...

CVE-2025-62287

...

CVE-2025-62288

CVE-2025-62288 affects Oracle Health Sciences Data Management Workbench (Logger component). Affected versions are 3.4.0.1.3 and 3.4.1.0.10. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access, leading to unauthorized access to critical data or full access t...

CVE-2025-62287

...

CVE-2025-61881

...

CVE-2025-61885

CVE-2025-61885 affects Oracle Life Sciences InForm (Oracle Health Sciences Applications) Web Server, version 7.0.1.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to read a subset of InForm data, with the impact limited to Confidentiality (C:L/I:N/A:N; CVSS 3....

CVE-2025-61762

...

CVE-2025-61760

...

CVE-2025-61755

...

CVE-2025-61752

CVE-2025-61752 affects Oracle WebLogic Server (Oracle Fusion Middleware), component Core, in versions 14.1.1.0.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP/2 can cause a hang or repeatable crash (complete DOS). The CVSSv3.1 base score is 7.5 (Availability impact). Co...

CVE-2025-61751

CVE-2025-61751 affects Oracle Financial Services Analytical Applications Infrastructure (Platform) with affected versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to create, delete, or modify critical data, leading to confiden...