CVE-2025-53046: Medium severity Oracle ZFS Storage Appliance Kit vulnerability
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Analytics). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53046?
CVE-2025-53046 has been classified as an easily exploitable vulnerability that poses a high risk due to its potential for allowing privileged access.
How do I fix CVE-2025-53046?
To fix CVE-2025-53046, you should apply the latest security updates provided for the Oracle ZFS Storage Appliance Kit version 8.8.
What systems are affected by CVE-2025-53046?
CVE-2025-53046 affects the Oracle ZFS Storage Appliance Kit product, specifically version 8.8.
What type of access is required to exploit CVE-2025-53046?
Exploitation of CVE-2025-53046 requires network access via HTTP to the Oracle ZFS Storage Appliance Kit.
Who is primarily at risk from CVE-2025-53046?
Organizations using Oracle ZFS Storage Appliance Kit 8.8 are primarily at risk from CVE-2025-53046 due to its high privilege access vulnerabilities.