CVE-2025-62475: Medium severity Oracle ZFS Storage Appliance Kit vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Software

2 affected components

Oracle ZFS Storage Appliance Kit

Oracle ZFS Storage Appliance Kit=8.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62475?

CVE-2025-62475 is considered an easily exploitable vulnerability that poses a high risk to systems.

How do I fix CVE-2025-62475?

To fix CVE-2025-62475, apply the latest security patches released by Oracle for the ZFS Storage Appliance Kit.

Who is affected by CVE-2025-62475?

CVE-2025-62475 affects users of the Oracle ZFS Storage Appliance Kit version 8.8.

What type of attack is possible with CVE-2025-62475?

CVE-2025-62475 allows high privileged attackers to compromise the Oracle ZFS Storage Appliance Kit via HTTP access.

What component of Oracle is impacted by CVE-2025-62475?

CVE-2025-62475 impacts the core component of the Oracle ZFS Storage Appliance Kit.