CVE-2025-62289: Medium severity Oracle ZFS Storage Appliance Kit vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Software

2 affected components

Oracle ZFS Storage Appliance Kit

Oracle ZFS Storage Appliance Kit=8.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62289?

CVE-2025-62289 is classified as an easily exploitable vulnerability that allows high privileged attackers to compromise the Oracle ZFS Storage Appliance Kit.

How do I fix CVE-2025-62289?

To fix CVE-2025-62289, you should apply the latest security updates and patches provided by Oracle for the ZFS Storage Appliance Kit.

Who is affected by CVE-2025-62289?

CVE-2025-62289 affects users of the Oracle ZFS Storage Appliance Kit, specifically version 8.8.

What are the potential impacts of CVE-2025-62289?

The potential impacts of CVE-2025-62289 include unauthorized access and exploitation of user data by high privileged attackers.

Is CVE-2025-62289 remotely exploitable?

Yes, CVE-2025-62289 is remotely exploitable with network access via HTTP.