CVE-2025-30739

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-30739
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. While the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data as well as unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N).

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cpujul2025.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*
History

29 Jul 2025, 17:29

Type Values Removed Values Added
References () https://www.oracle.com/security-alerts/cpujul2025.html - () https://www.oracle.com/security-alerts/cpujul2025.html - Patch, Vendor Advisory
First Time Oracle crm Technical Foundation
Oracle
CPE cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*

17 Jul 2025, 21:15

Type Values Removed Values Added
CWE CWE-863

16 Jul 2025, 14:59

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en Oracle CRM Technical Foundation de Oracle E-Business Suite (componente: Preferencias). Las versiones compatibles afectadas son la 12.2.11 y la 12.2.13. Esta vulnerabilidad, fácilmente explotable, permite a un atacante con privilegios elevados y acceso a la red a través de HTTP comprometer Oracle CRM Technical Foundation. Si bien la vulnerabilidad afecta a Oracle CRM Technical Foundation, los ataques pueden afectar significativamente a otros productos (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en actualizaciones, inserciones o eliminaciones no autorizadas de algunos datos accesibles de Oracle CRM Technical Foundation, así como en accesos de lectura no autorizados a un subconjunto de dichos datos. Puntuación base de CVSS 3.1: 5.5 (Afecta a la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N).

15 Jul 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-15 20:15

Updated : 2025-07-29 17:29

NVD link : CVE-2025-30739

Mitre link : CVE-2025-30739

CVE.ORG link : CVE-2025-30739

JSON object : View

Products Affected

oracle

  • crm_technical_foundation
CWE
CWE-863

Incorrect Authorization