VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 21, 2025· Updated Jan 31, 2025

CVE-2025-21498

CVE-2025-21498

Description

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected products

2
  • Oracle Corporation/HTTP Serverv52 versions
    cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*range: 12.2.1.4.0
    • (no CPE)range: =12.2.1.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.