CVE-2025-61751CWE-862broken-access-control

CVE-2025-61751

High · published October 22, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

🔒 Watch out! A low-privileged attacker could easily access critical data in Oracle Financial Services Applications, making this vulnerability a real headache! ⚡ Imagine a bank vault where the only thing keeping it secure is a flimsy latch. Anyone with a bit of network access could just push it open and stroll right in, accessing all that valuable data without breaking a sweat. If exploited, an attacker could create, delete, or modify critical data, gaining unauthorized access to everything in Oracle Financial Services Analytical Applications Infrastructure. This could lead to severe consequences, including loss of sensitive financial information and irreversible damages to your operations. It's a recipe for disaster! 🔥

Put simply

Imagine a bank vault where the only thing keeping it secure is a flimsy latch. Anyone with a bit of network access could just push it open and stroll right in, accessing all that valuable data without breaking a sweat. This vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure, potentially leading to unauthorized actions on critical data. Supported affected versions include 8.0.7.9, 8.0.8.7, and 8.1.2.5.

What to do

If exploited, an attacker could create, delete, or modify critical data, gaining unauthorized access to everything in Oracle Financial Services Analytical Applications Infrastructure. This could lead to severe consequences, including loss of sensitive financial information and irreversible damages to your operations. It's a recipe for disaster! 🔥 Immediately patch to the latest version of the Oracle Financial Services Applications to close this security gap. Ensure that network access controls are in place to restrict unauthorized users. Conduct regular audits of data access logs to monitor for unusual activity. You've got this! With these steps, you can solidify your defenses and protect your data like a pro! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-10-22T00:20Z
Affected products (3)
ProductVersionsFixed in
oracle/financial_services_analytical_applications_infrastructureall versions—
oracle/financial_services_analytical_applications_infrastructureall versions—
oracle/financial_services_analytical_applications_infrastructureall versions—
References (1)
EPSS history
Timeline
  • 21 OCT 20:03Z
    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
    cvelistv5