PT-2025-42940 · Oracle · Oracle Product Hub

Published 2025-10-21 · Updated 2025-10-22 · CVE-2025-53043

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.14

Description An issue exists in the Oracle Product Hub component of Oracle E-Business Suite that allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or complete access to all Oracle Product Hub accessible data.

Recommendations Versions 12.2.3 through 12.2.14 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-13388

CVE-2025-53043

Affected Products

Oracle Product Hub

References · 9

• https://bdu.fstec.ru/vul/2025-13388 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-53043 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53043 · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://twitter.com/RedPacketSec/status/1980782892063064454 · Twitter Post
• https://t.me/cveNotify/139882 · Telegram Post
• https://twitter.com/CVEnew/status/1980736631264145923 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1980747294631670056 · Twitter Post
• https://twitter.com/CveTodo/status/1980740561909760107 · Twitter Post