CVE-2025-53036
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-23

Assigner: Oracle

Description
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. While the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-21
Last Modified
2025-10-23
Generated
2026-06-16
AI Q&A
2025-10-21
EPSS Evaluated
2026-06-15
NVD
CVE-2025-53036
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
oracle financial_services_analytical_applications_infrastructure 8.0.7.9.0
oracle financial_services_analytical_applications_infrastructure 8.0.8.7.0
oracle financial_services_analytical_applications_infrastructure 8.1.2.5.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Oracle Financial Services Analytical Applications Infrastructure product, specifically affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. It is easily exploitable by an unauthenticated attacker with network access via HTTP. The attacker can compromise the infrastructure, potentially gaining unauthorized access to critical or all accessible data within the Oracle Financial Services Analytical Applications Infrastructure. The vulnerability has a high confidentiality impact and can affect additional related products.

Impact Analysis

This vulnerability can lead to unauthorized access to critical data or complete access to all data accessible through the Oracle Financial Services Analytical Applications Infrastructure. This means sensitive financial information could be exposed or compromised, potentially leading to data breaches, financial loss, and damage to organizational reputation.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-53036. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart