CVE-2025-53043CWE-200information-disclosure

CVE-2025-53043

High · published October 22, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

⚡ A low-privileged attacker can easily exploit this vulnerability in Oracle Product Hub, leading to unauthorized changes in critical data! Think of Oracle Product Hub as a bustling library where anyone with a library card can remove or alter books without permission — unsettling, right? This vulnerability lets attackers slip in with minimal effort, just like a sneaky bookworm who knows how to dodge the librarian's watchful eye. Imagine an unauthorized user being able to create, delete, or modify critical information, potentially leading to chaos in your organization’s data management. The stakes are high, as this vulnerability could grant full access to sensitive data, wreaking havoc on operations and trust. Your data's integrity could hang by a thread!

Put simply

Think of Oracle Product Hub as a bustling library where anyone with a library card can remove or alter books without permission — unsettling, right? This vulnerability lets attackers slip in with minimal effort, just like a sneaky bookworm who knows how to dodge the librarian's watchful eye. CVE-2025-53043 allows attackers with network access via HTTP to manipulate Oracle Product Hub due to insufficient access controls. This means a low-privileged user could exploit the system to gain unauthorized access to critical data with ease.

What to do

Imagine an unauthorized user being able to create, delete, or modify critical information, potentially leading to chaos in your organization’s data management. The stakes are high, as this vulnerability could grant full access to sensitive data, wreaking havoc on operations and trust. Your data's integrity could hang by a thread! Patch your Oracle E-Business Suite to the latest version, targeting 12.2.15 or higher to mitigate this vulnerability. Additionally, review access controls and minimize network exposure to the Product Hub as a temporary safeguard. Don't wait — take action now! You've got this! By following these steps, you can bolster your defenses and keep your data secure! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-22T00:20Z
Affected products (1)
ProductVersionsFixed in
oracle/product_hub≥ 12.2.3, ≤ 12.2.14—
References (1)
EPSS history
Timeline
  • 21 OCT 20:02Z
    Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog)
    cvelistv5