Oracle Commerce Platform Vulnerability Exposes Data Due to Authentication Flaws

CVE-2025-21576

What is CVE-2025-21576?

A vulnerability in Oracle Commerce Platform's Dynamo Personalization Server allows low-privileged attackers with network access via HTTP to exploit the application. This flaw requires human interaction for successful exploitation and impacts data confidentiality and integrity, enabling unauthorized updates, inserts, or deletions. Additionally, it allows unauthorized read access to sensitive data. The scope of potential attacks extends beyond the Oracle Commerce product, affecting various interconnected systems.

References