CVE-2025-30728
First published: Tue Apr 15 2025(Updated: )
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Configurator | >=12.2.3<=12.2.14 | |
| Oracle Configurator | >=12.2.3<=12.2.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-30728?
CVE-2025-30728 is rated as easily exploitable, allowing an unauthenticated attacker to compromise Oracle Configurator.
What versions of Oracle Configurator are affected by CVE-2025-30728?
CVE-2025-30728 affects Oracle Configurator versions 12.2.3 through 12.2.14.
How do I fix CVE-2025-30728?
To fix CVE-2025-30728, update Oracle Configurator to a patched version beyond 12.2.14.
Can CVE-2025-30728 be exploited remotely?
Yes, CVE-2025-30728 can be exploited remotely by an attacker with network access via HTTP.
Who is affected by CVE-2025-30728?
Organizations using supported versions of Oracle Configurator from 12.2.3 to 12.2.14 are affected by CVE-2025-30728.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/source
- agent/author
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- vendor/oracle
- canonical/oracle configurator
- version/oracle configurator/12.2.3
- version/oracle configurator/12.2.14