Oracle E-Business Suite Orders Component Vulnerability in Oracle Configurator

CVE-2025-30720

Summary

A vulnerability in the Oracle Configurator component of the Oracle E-Business Suite allows unauthenticated network access, enabling potential attackers to compromise data. While the vulnerability itself lies within Oracle Configurator, successful exploitation can have broader implications, affecting other products. Attackers may gain unauthorized access for update, insertion, or deletion operations of data within the application's scope, as well as the ability to read certain data. The nature of this vulnerability necessitates human interaction from an individual other than the attacker, making it a targeted concern for organizations using the affected versions.

References