Authorization Flaw in Oracle REST Data Services Exposes Sensitive Data

CVE-2025-30756

What is CVE-2025-30756?

An authorization flaw in Oracle REST Data Services allows unauthenticated attackers with network access over HTTP to exploit the system. Successful attacks require human interaction and can lead to unauthorized alterations such as updates, inserts, or deletions of accessible data. Additionally, attackers may gain unauthorized read access to a subset of this data, posing significant risks of data exposure and integrity compromise across other integrated products.

References