Oracle Analytics Desktop Vulnerability in Oracle Analytics Product
CVE-2025-21532

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Analytics Desktop
Vendor
CVE Published:
21 January 2025

What is CVE-2025-21532?

A vulnerability exists in Oracle Analytics Desktop that could allow an attacker with low privileges to compromise the system. This issue affects all versions prior to 8.1.0. By exploiting this vulnerability, attackers can gain control over Oracle Analytics Desktop, impacting confidentiality, integrity, and availability of the data processed. Organizations using vulnerable versions are advised to upgrade to mitigate potential risks. For detailed information, refer to the Oracle advisory.

Affected Version(s)

Oracle Analytics Desktop * < 8.1.0

References

https://www.oracle.com/security-alerts/cpujan2025.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.