Vulnerability in Oracle E-Business Suite's Application Logging Interfaces
CVE-2025-53058

6.1MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
21 October 2025

What is CVE-2025-53058?

The vulnerability in Oracle Applications Manager allows unauthenticated attackers to exploit its application logging interfaces over HTTP. An attacker may gain unauthorized access to manipulate and retrieve sensitive data, necessitating user interaction from another party for successful exploitation. While primarily affecting the Oracle Applications Manager, the ramifications can extend to other interconnected products within the Oracle E-Business Suite, leading to significant risks in data integrity and confidentiality.

Affected Version(s)

Oracle Applications Manager 12.2.3 <= 12.2.14

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.