Vulnerability in Oracle Smart View for Office by Oracle

CVE-2025-30737

What is CVE-2025-30737?

A vulnerability exists in Oracle Smart View for Office, specifically impacting the 24.200 version of Oracle Hyperion's Core Smart View component. This flaw permits an attacker with high privileges and network access via HTTP to compromise the application. Exploitation of this vulnerability requires human interaction from a user other than the attacker, leading to severe risks. Successful attacks may enable unauthorized creation, deletion, or modification of critical data, granting attackers access to all data accessible through Oracle Smart View for Office. The potential consequences underscore the need for immediate attention to bolster security measures.

References