CVE-2025-21578

Vulnerability in Oracle Secure Backup (component: General)

Medium · published April 15, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2025-04-15T20:30Z
EPSS history
Timeline
  • 15 APR 20:30Z
    Vulnerability in Oracle Secure Backup (component: General)
    cvelistv5