CVE-2025-62477: Medium severity Oracle ZFS Storage Appliance Kit vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Remote Replication). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Software

2 affected components

Oracle ZFS Storage Appliance Kit

Oracle ZFS Storage Appliance Kit=8.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62477?

CVE-2025-62477 is classified as an easily exploitable vulnerability that allows high privileged attackers to compromise the Oracle ZFS Storage Appliance.

How do I fix CVE-2025-62477?

To mitigate the risk of CVE-2025-62477, you should apply the latest security patch provided by Oracle for the Oracle ZFS Storage Appliance Kit.

Who is affected by CVE-2025-62477?

CVE-2025-62477 affects users of Oracle ZFS Storage Appliance Kit version 8.8.

What component of the Oracle ZFS Storage Appliance Kit is vulnerable in CVE-2025-62477?

The vulnerability in CVE-2025-62477 is located in the Remote Replication component of the Oracle ZFS Storage Appliance Kit.

What type of access is required to exploit CVE-2025-62477?

An attacker needs high privileged network access via HTTP to exploit CVE-2025-62477.