PT-2025-29670 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Published

2025-07-15

·

Updated

2025-07-24

·

CVE-2025-53031

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.8 through 8.0.8.6 Oracle Financial Services Analytical Applications Infrastructure versions 8.1.1.4 through 8.1.2.5
Description An easily exploitable issue exists in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications. An unauthenticated attacker with network access via HTTP can compromise the application, resulting in unauthorized read access to a subset of data.
Recommendations Update Oracle Financial Services Analytical Applications Infrastructure version 8.0.7.8 to a later version. Update Oracle Financial Services Analytical Applications Infrastructure version 8.0.8.5 to a later version. Update Oracle Financial Services Analytical Applications Infrastructure version 8.0.8.6 to a later version. Update Oracle Financial Services Analytical Applications Infrastructure version 8.1.1.4 to a later version. Update Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 to a later version.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-09974
CVE-2025-53031

Affected Products

Oracle Financial Services Analytical Applications Infrastructure