CVE-2025-53049: High severity Oracle Business Intelligence Enterprise Edition vulnerability
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53049?
CVE-2025-53049 is classified as an easily exploitable vulnerability with high severity that affects Oracle Business Intelligence Enterprise Edition.
How do I fix CVE-2025-53049?
To fix CVE-2025-53049, it is recommended that you update to the latest patched version of Oracle Business Intelligence Enterprise Edition.
Which versions of Oracle Business Intelligence Enterprise Edition are affected by CVE-2025-53049?
CVE-2025-53049 affects Oracle Business Intelligence Enterprise Edition versions 7.6.0.0.0 and 8.2.0.0.0.
What type of threat does CVE-2025-53049 pose?
CVE-2025-53049 poses a threat that allows high privileged attackers with network access to exploit it easily.
Is there a workaround for CVE-2025-53049?
No specific workaround for CVE-2025-53049 has been mentioned, and applying the relevant update is strongly advised.