PT-2025-42973 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-61751

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 through 8.0.8.7 Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5

Description An easily exploitable issue exists in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications. A low-privileged attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data, or complete access to all accessible data.

Recommendations Update Oracle Financial Services Analytical Applications Infrastructure version 8.0.7.9 to a later version. Update Oracle Financial Services Analytical Applications Infrastructure version 8.0.8.7 to a later version. Update Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 to a later version.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-61751

Affected Products

Oracle Financial Services Analytical Applications Infrastructure

References · 4

• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61751 · Security Note
• https://twitter.com/CVEnew/status/1980736600494715382 · Twitter Post