High WID-SEC-2025-2354 9 CVEs

Oracle E-Business Suite: Mehrere Schwachstellen

Published Oct 21, 2025 · Updated Oct 22, 2025 · Revision 2 · de-DE

Vendor: Oracle Product: E-Business Suite Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle E-Business Suite ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle E-Business Suite ist eine Sammlung geschäftlicher Anwendungen für Unternehmen.

Vulnerabilities 9

Critical 9.8

CVE-2025-53072 Public exploit

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

Oracle Oracle Marketing

Oct 21, 2025
Critical 9.8

CVE-2025-62481

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

Oracle Oracle Marketing

Oct 21, 2025
High 8.1

CVE-2025-53043

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported version…

Oracle Oracle Product Hub

Oct 21, 2025
Medium 6.1

CVE-2025-53041

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th…

Oracle Oracle iStore

Oct 21, 2025
Medium 6.1

CVE-2025-53052

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp…

Oracle Oracle Workflow

Oct 21, 2025
Medium 6.1

CVE-2025-53058

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Int…

Oracle Oracle Applications Manager

Oct 21, 2025
Medium 6.1

CVE-2025-61753

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions…

Oracle Oracle Scripting

Oct 21, 2025
Medium 4.3

CVE-2025-53064

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Sup…

Oracle Oracle Applications Framework

Oct 21, 2025
Medium 4.3

CVE-2025-53071

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). …

Oracle Oracle Applications Framework

Oct 21, 2025

Revision history

2025-10-22 #2
Referenz(en) aufgenommen: EUVD-2025-35276, EUVD-2025-35291, EUVD-2025-35256, EUVD-2025-35293, EUVD-2025-35282, EUVD-2025-35262, EUVD-2025-35270, EUVD-2025-35263
2025-10-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2025 - Appendix Oracle E-Business Suite vom 2025-10-21
https://www.oracle.com/security-alerts/cpuoct2025.html#AppendixEBS