CVE-2025-62290: High severity Oracle ZFS Storage Appliance Kit vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in takeover of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle ZFS Storage Appliance Kit

Oracle ZFS Storage Appliance Kit=8.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62290?

CVE-2025-62290 is classified as an easily exploitable vulnerability that allows a high privileged attacker to compromise the Oracle ZFS Storage Appliance Kit.

How do I fix CVE-2025-62290?

To mitigate CVE-2025-62290, apply the latest security patches provided by Oracle for version 8.8 of the Oracle ZFS Storage Appliance Kit.

Who is affected by CVE-2025-62290?

CVE-2025-62290 affects users of Oracle ZFS Storage Appliance Kit version 8.8.

What types of attacks can exploit CVE-2025-62290?

CVE-2025-62290 can be exploited by attackers with network access via HTTP to compromise the affected system.

What component of the Oracle ZFS Storage Appliance Kit is impacted by CVE-2025-62290?

The vulnerability affects the Block Storage component of the Oracle ZFS Storage Appliance Kit.