CVE-2025-62480: Low severity Oracle ZFS Storage Appliance Kit vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Affected Software

2 affected components

Oracle ZFS Storage Appliance Kit

Oracle ZFS Storage Appliance Kit=8.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62480?

CVE-2025-62480 is considered easily exploitable and poses a high risk to security due to its potential impact.

How do I fix CVE-2025-62480?

To mitigate CVE-2025-62480, patch the Oracle ZFS Storage Appliance Kit to the latest version recommended by Oracle.

Who is affected by CVE-2025-62480?

CVE-2025-62480 affects users of the Oracle ZFS Storage Appliance Kit version 8.8.

What type of attacker could exploit CVE-2025-62480?

CVE-2025-62480 can be exploited by a high privileged attacker with network access via HTTP.

What component is affected in CVE-2025-62480?

CVE-2025-62480 affects the Naming Subsystem component of the Oracle ZFS Storage Appliance Kit.