PT-2025-42936 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-53037

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 through 8.1.2.5

Description An easily exploitable issue exists in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications. An unauthenticated attacker with network access via HTTP can compromise the system, potentially leading to a complete takeover of the infrastructure. The issue allows for remote code execution.

Recommendations Oracle Financial Services Analytical Applications Infrastructure version 8.0.7.9 should be updated. Oracle Financial Services Analytical Applications Infrastructure version 8.0.8.7 should be updated. Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 should be updated.

Fix

RCE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-13381

CVE-2025-53037

Affected Products

Oracle Financial Services Analytical Applications Infrastructure

References · 8

• https://osv.dev/vulnerability/CVE-2025-53037 · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13381 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-53037 · Security Note
• https://twitter.com/CVEnew/status/1980736635034825157 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1980744967216599416 · Twitter Post
• https://twitter.com/CveFindCom/status/1980728581656326154 · Twitter Post
• https://twitter.com/CveTodo/status/1980738634954252792 · Twitter Post