CVE-2025-62479: Low severity Oracle ZFS Storage Appliance Kit vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Affected Software

2 affected components

Oracle ZFS Storage Appliance Kit

Oracle ZFS Storage Appliance Kit=8.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62479?

CVE-2025-62479 is considered an easily exploitable vulnerability that poses a high risk to the affected systems.

How do I fix CVE-2025-62479?

To fix CVE-2025-62479, apply the latest security updates provided by Oracle for the ZFS Storage Appliance Kit.

Who is affected by CVE-2025-62479?

CVE-2025-62479 affects all users of the Oracle ZFS Storage Appliance Kit version 8.8.

What type of attack is possible due to CVE-2025-62479?

CVE-2025-62479 allows a high privileged attacker with network access via HTTP to potentially compromise the Oracle ZFS Storage Appliance Kit.

What component is involved in CVE-2025-62479?

CVE-2025-62479 involves the Block Storage component of the Oracle ZFS Storage Appliance Kit.