Vulnerability in Oracle Application Express Impacting Strategic Planner Starter App

CVE-2025-50067

What is CVE-2025-50067?

A vulnerability in Oracle Application Express, particularly in the Strategic Planner Starter App, allows a low privileged attacker with HTTP network access to compromise the application. This exploit requires human interaction from a third party, which presents a unique risk profile. Although the vulnerability resides within Oracle Application Express, it may have implications for other products, broadening the impact of potential attacks. Successful exploitation could facilitate unauthorized access and potentially lead to complete control over the affected application.

References