Back Digital.Nhs.Uk CC-4710 - Oracle Releases Security Advisory to Address Two Critical Severity Vulnerabilities in E
Oracle has released a quarterly rollup security advisory addressing CVE-2025-53072 and CVE-2025-62481, which, if successfully exploited, could lead to unauthenticated takeover of Oracle Marketing
Oracle has released a quarterly rollup security advisory addressing CVE-2025-53072 and CVE-2025-62481, which, if successfully exploited, could lead to unauthenticated takeover of Oracle Marketing
The following platforms are known to be affected:
Additional components and end-of-life software affected
Oracle has released a security advisory to address two critical severity vulnerabilities in the Marketing Administration component of the Oracle Marketing product within E-Business Suite.
Affected organisations must review Oracle's Quarterly Rollup Security Advisory (AV25-688) and apply the relevant updates as soon as practicable.
Note: Organisations running "sustaining support" or end-of-life releases of Oracle E-Business Suite must upgrade to a supported version. Oracle E-Business Suite releases r11, r12.0, and r12.1 are in Oracle's "sustaining support" lifecycle stage and do not receive security patches.
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Last edited: 23 October 2025 11:34 am
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
