CVE-2025-30733
First published: Tue Apr 15 2025(Updated: )
Vulnerability in the RDBMS Listener component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS Listener. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all RDBMS Listener accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Database | >=19.3<=19.26>=21.3<21.17>=23.4<23.7 | |
| Oracle RDBMS Listener | >=19.3<=19.26 | |
| Oracle RDBMS Listener | >=21.3<=21.17 | |
| Oracle RDBMS Listener | >=23.4<=23.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-30733?
CVE-2025-30733 is considered a high severity vulnerability due to its ability to be exploited by unauthenticated attackers.
How do I fix CVE-2025-30733?
To mitigate CVE-2025-30733, you should apply the latest security patches provided by Oracle for the affected Database Server versions.
What components are affected by CVE-2025-30733?
CVE-2025-30733 affects the RDBMS Listener component of Oracle Database Server.
Which Oracle Database Server versions are vulnerable to CVE-2025-30733?
Vulnerable versions include Oracle Database Server 19.3 to 19.26, 21.3 to 21.17, and 23.4 to 23.7.
Can CVE-2025-30733 be exploited remotely?
Yes, CVE-2025-30733 can be exploited remotely by an unauthenticated attacker with network access via Oracle Net.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/source
- agent/author
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle database
- canonical/oracle rdbms listener
- version/oracle rdbms listener/19.3
- version/oracle rdbms listener/19.26
- version/oracle rdbms listener/21.3
- version/oracle rdbms listener/21.17
- version/oracle rdbms listener/23.4
- version/oracle rdbms listener/23.7