Vulnerability in Oracle E-Business Suite's Application Logging Interfaces
CVE-2025-53058

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Applications Manager
Vendor
CVE Published:
21 October 2025

What is CVE-2025-53058?

The vulnerability in Oracle Applications Manager allows unauthenticated attackers to exploit its application logging interfaces over HTTP. An attacker may gain unauthorized access to manipulate and retrieve sensitive data, necessitating user interaction from another party for successful exploitation. While primarily affecting the Oracle Applications Manager, the ramifications can extend to other interconnected products within the Oracle E-Business Suite, leading to significant risks in data integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Oracle Applications Manager 12.2.3 <= 12.2.14

References

https://www.oracle.com/security-alerts/cpuoct2025.html
vendor-advisory

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.