PT-2025-29658 · Oracle · Oracle E-Business Suite+1

Published 2025-07-15 · Updated 2025-07-24 · CVE-2025-50105

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.3 through 12.2.14

Description An easily exploitable issue exists in the Oracle Universal Work Queue component of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data, as well as complete access to all Oracle Universal Work Queue accessible data.

Recommendations Update to a version beyond 12.2.14.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-08908

CVE-2025-50105

Affected Products

Oracle E-Business Suite

Oracle Universal Work Queue

References · 7

• https://oracle.com/security-alerts/cpujul2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50105 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50105 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08908 · Security Note
• https://twitter.com/dailycve/status/1948492209986175314 · Twitter Post
• https://t.me/cvetracker/27887 · Telegram Post
• https://twitter.com/CVEnew/status/1945207826629922934 · Twitter Post