VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 21, 2025· Updated Feb 26, 2026

CVE-2025-21532

CVE-2025-21532

Description

Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). Supported versions that are affected are Prior to 8.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Analytics Desktop executes to compromise Oracle Analytics Desktop. Successful attacks of this vulnerability can result in takeover of Oracle Analytics Desktop. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products

2
  • Oracle Corporation/Oracle Analytics Desktopcpe-rescue2 versions
    cpe:2.3:a:oracle:analytics_desktop:prior_to_8.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:analytics_desktop:prior_to_8.1.0:*:*:*:*:*:*:*range: *
    • (no CPE)range: <8.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.