PT-2025-42944 · Oracle · Portable Clusterware+1

Published 2025-10-21 · Updated 2025-11-14 · CVE-2025-53047

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.28 Oracle Database Server versions 21.3 through 21.19 Oracle Database Server versions 23.4 through 23.9

Description An easily exploitable issue exists within the Portable Clusterware component that allows an unauthenticated attacker with network access via Bonjour to compromise Portable Clusterware. Successful exploitation can lead to unauthorized read access to a subset of Portable Clusterware data. Attacks may significantly impact additional products.

Recommendations Update Oracle Database Server to a version later than 19.28. Update Oracle Database Server to a version later than 21.19. Update Oracle Database Server to a version later than 23.9.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-15846

CVE-2025-53047

Affected Products

Oracle Database Server

Portable Clusterware

References · 7

• https://bdu.fstec.ru/vul/2025-15846 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53047 · Security Note
• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1980736627573158104 · Twitter Post
• https://t.me/cveNotify/139886 · Telegram Post
• https://twitter.com/dailycve/status/1989126850099257400 · Twitter Post