CVE-2025-30751: High severity Oracle Database Server vulnerability
Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Oracle Database. Successful attacks of this vulnerability can result in takeover of Oracle Database. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30751?
CVE-2025-30751 has a high severity rating due to its potential for exploitation by low privileged attackers.
How do I fix CVE-2025-30751?
To fix CVE-2025-30751, apply the recommended patches provided by Oracle for the affected database versions.
What versions of Oracle Database Server are impacted by CVE-2025-30751?
CVE-2025-30751 affects Oracle Database Server versions 19.3 to 19.27 and 23.4 to 23.8.
Can unprivileged users exploit CVE-2025-30751?
Yes, CVE-2025-30751 can be exploited by low privileged attackers with specific privileges and network access.
Is there a workaround for CVE-2025-30751?
Currently, no specific workarounds are recommended for mitigating CVE-2025-30751 besides applying the security updates.