Vulnerability in Oracle E-Business Suite's Advanced Outbound Telephony Component
CVE-2025-21489
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 21 January 2025
What is CVE-2025-21489?
An unauthenticated network access vulnerability exists in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite, specifically between versions 12.2.3 to 12.2.10. This flaw can be exploited by attackers who have network access through HTTP, requiring human interaction from a third party. Although the vulnerability is isolated to the Advanced Outbound Telephony component, its exploitation could lead to broader impacts across additional connected products. A successful attack may allow unauthorized attackers to perform operations such as updating, inserting, or deleting data, along with obtaining unauthorized read access to sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Advanced Outbound Telephony 12.2.3 <= 12.2.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved