Medium WID-SEC-2025-2352 6 CVEs

Oracle Database Server: Mehrere Schwachstellen

Published Oct 21, 2025 · Updated Oct 22, 2025 · Revision 2 · de-DE

Vendor: Oracle Product: Database Server Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Database Server ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Datenbank ist ein weit verbreitetes relationales Datenbanksystem.

Vulnerabilities 6

Critical 9.4

CVE-2025-4517 Public exploit

Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
Medium 6.8

CVE-2025-4949

XXE vulnerability in Eclipse JGit

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are v…

Eclipse JGit Eclipse JGit thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven

May 21, 2025
Medium 5.9

CVE-2025-61881

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, …

Oracle Oracle Database Server

Oct 21, 2025
Medium 5.8

CVE-2025-53047

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are…

Oracle Oracle Database Server

Oct 21, 2025
Low 2.7

CVE-2025-53051 Public exploit

Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected a…

Oracle Oracle Database Server

Oct 21, 2025
Low 2.7

CVE-2025-61749

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 23.4-2…

Oracle Oracle Database Server

Oct 21, 2025

Revision history

2025-10-22 #2
Referenz(en) aufgenommen: EUVD-2025-35283, EUVD-2025-35245, EUVD-2025-35260, EUVD-2025-35287
2025-10-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2025 - Appendix Oracle Database Server vom 2025-10-21
https://www.oracle.com/security-alerts/cpuoct2025.html#AppendixDB