BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-23

Assigner: Oracle

Description

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. While the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-21

Last Modified

2025-10-23

Generated

2026-07-06

AI Q&A

2025-10-21

EPSS Evaluated

2026-07-05

NVD

CVE-2025-53036

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	financial_services_analytical_applications_infrastructure	8.0.7.9.0
oracle	financial_services_analytical_applications_infrastructure	8.0.8.7.0
oracle	financial_services_analytical_applications_infrastructure	8.1.2.5.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Oracle Financial Services Analytical Applications Infrastructure product, specifically affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. It is easily exploitable by an unauthenticated attacker with network access via HTTP. The attacker can compromise the infrastructure, potentially gaining unauthorized access to critical or all accessible data within the Oracle Financial Services Analytical Applications Infrastructure. The vulnerability has a high confidentiality impact and can affect additional related products.

Impact Analysis

This vulnerability can lead to unauthorized access to critical data or complete access to all data accessible through the Oracle Financial Services Analytical Applications Infrastructure. This means sensitive financial information could be exposed or compromised, potentially leading to data breaches, financial loss, and damage to organizational reputation.

Hi! I’m here to help you understand CVE-2025-53036. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70