Java VM Vulnerability in Oracle Database Server Affecting Multiple Versions

CVE-2025-50069

What is CVE-2025-50069?

A significant security vulnerability exists within the Java VM component of Oracle Database Server, affecting select versions between 19.3 and 19.27 and 21.3 to 21.18. This flaw can be exploited by a low-privileged attacker with specific roles, such as Create Session and Create Procedure privileges, who has network access via Oracle Net. While the flaw is isolated to the Java VM, its exploitation may lead to severe consequences, including unauthorized access to critical data or complete access to all data accessible through Java VM. Organizations are urged to update their systems to mitigate potential risks.

References