Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2025.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Oct 2025, 16:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle financial Services Analytical Applications Infrastructure
Oracle |
|
| CPE | cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8.7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.2.5.0:*:*:*:*:*:*:* |
|
| References | () https://www.oracle.com/security-alerts/cpuoct2025.html - Vendor Advisory |
22 Oct 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-306 |
21 Oct 2025, 20:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-21 20:20
Updated : 2025-10-23 16:08
NVD link : CVE-2025-53037
Mitre link : CVE-2025-53037
CVE.ORG link : CVE-2025-53037
JSON object : View
Products Affected
oracle
- financial_services_analytical_applications_infrastructure
CWE
CWE-306
Missing Authentication for Critical Function