Java VM Vulnerability in Oracle Database Server
CVE-2025-30736

7.4HIGH

Key Information:

Vendor
Oracle
Status
Oracle Database Server
Vendor
CVE Published:
15 April 2025

Summary

A vulnerability exists in the Java VM component of Oracle Database Server that allows unauthenticated attackers with network access to exploit the system via various protocols. This can lead to unauthorized actions such as the creation, deletion, or modification of critical data within accessible Java VM contexts. As a result, attackers may gain complete or partial access to sensitive information, significantly impacting data confidentiality and integrity.

Affected Version(s)

Oracle Database Server 19.3 <= 19.26

Oracle Database Server 21.3 <= 21.17

Oracle Database Server 23.4 <= 23.7

References

https://www.oracle.com/security-alerts/cpuapr2025.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.