CVE-2025-53047: Infoleak
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-23.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via Bonjour to compromise Portable Clusterware. While the vulnerability is in Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Portable Clusterware accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53047?
CVE-2025-53047 is classified as easily exploitable, posing a significant risk to the affected Oracle Database Server versions.
How do I fix CVE-2025-53047?
To fix CVE-2025-53047, update your Oracle Database Server to the latest patched version as recommended by Oracle.
What versions of Oracle Database Server are affected by CVE-2025-53047?
CVE-2025-53047 affects Oracle Database Server versions 19.3-19.28, 21.3-21.19, and 23.4-23.9.
Can CVE-2025-53047 be exploited remotely?
Yes, CVE-2025-53047 can be exploited by an unauthenticated attacker with network access via Bonjour.
What components are affected by CVE-2025-53047?
CVE-2025-53047 specifically affects the Portable Clusterware component of Oracle Database Server.