Vulnerability in Oracle Application Express Impacting Strategic Planner Starter App
CVE-2025-50067

9CRITICAL

Key Information:

Vendor

Oracle
Status
Oracle Application Express
Vendor
CVE Published:
15 July 2025

What is CVE-2025-50067?

A vulnerability in Oracle Application Express, particularly in the Strategic Planner Starter App, allows a low privileged attacker with HTTP network access to compromise the application. This exploit requires human interaction from a third party, which presents a unique risk profile. Although the vulnerability resides within Oracle Application Express, it may have implications for other products, broadening the impact of potential attacks. Successful exploitation could facilitate unauthorized access and potentially lead to complete control over the affected application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Oracle Application Express 24.2.4

Oracle Application Express 24.2.5

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.