Medium severity5.3NVD Advisory· Published Apr 15, 2025· Updated Jun 17, 2026
CVE-2025-30702
CVE-2025-30702
Description
Vulnerability in the Fleet Patching and amp; Provisioning component of Oracle Database Server. Supported versions that are affected are 19.3-19.26. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Fleet Patching and amp; Provisioning. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Fleet Patching and amp; Provisioning accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products
4cpe:2.3:a:oracle:fleet_patching_and_provisioning:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:fleet_patching_and_provisioning:*:*:*:*:*:*:*:*range: >=19.3,<=19.26
- (no CPE)range: 19.3-19.26
19.3-19.26+ 1 more
- (no CPE)range: 19.3-19.26
- (no CPE)range: 19.3
Patches
Vulnerability mechanics
References
1- www.oracle.com/security-alerts/cpuapr2025.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.