CVE-2025-61881: Medium severity Oracle Database Server vulnerability
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-23.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61881?
CVE-2025-61881 is considered a difficult to exploit vulnerability that allows unauthenticated remote access via Oracle Net.
How do I fix CVE-2025-61881?
To fix CVE-2025-61881, update your Oracle Database Server to the latest patch version as recommended by Oracle.
Which versions of Oracle Database Server are affected by CVE-2025-61881?
CVE-2025-61881 affects Oracle Database Server versions 19.3 to 19.28, 21.3 to 21.19, and 23.4 to 23.9.
Can CVE-2025-61881 be exploited without authentication?
Yes, CVE-2025-61881 can be exploited by an unauthenticated attacker with network access.
What component of Oracle Database Server is impacted by CVE-2025-61881?
CVE-2025-61881 impacts the Java VM component of Oracle Database Server.