Unauthenticated Network Access Vulnerability in Oracle Database Server's Portable Clusterware

CVE-2025-53047

What is CVE-2025-53047?

A vulnerability exists in the Portable Clusterware component of Oracle Database Server, enabling an unauthenticated attacker with network access via Bonjour to exploit this weakness. This flaw primarily affects versions ranging from 19.3 to 19.28, 21.3 to 21.19, and 23.4 to 23.9. The exploitation can lead to unauthorized read access to certain data within Portable Clusterware, potentially impacting other products as well. Addressing this vulnerability is critical for maintaining the integrity and confidentiality of your database environment.

References