CVE-2025-62481: Critical severity Oracle Marketing vulnerability
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62481?
CVE-2025-62481 is considered easily exploitable, allowing unauthenticated attackers to compromise Oracle Marketing.
How do I fix CVE-2025-62481?
To fix CVE-2025-62481, apply the latest security patches provided by Oracle for affected versions between 12.2.3 and 12.2.14.
Which versions of Oracle Marketing are affected by CVE-2025-62481?
CVE-2025-62481 affects Oracle Marketing versions from 12.2.3 to 12.2.14.
What component of Oracle E-Business Suite is impacted by CVE-2025-62481?
CVE-2025-62481 impacts the Marketing Administration component of Oracle E-Business Suite.
Who can exploit CVE-2025-62481?
CVE-2025-62481 can be exploited by unauthenticated attackers with network access via HTTP.