CVE-2025-21578
published 2025-04-15CVE-2025-21578: Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and…
PriorityP431medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.19%
9.4th percentile
Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | secure_backup | — | — |
| oracle | secure_backup | — | — |
| oracle | secure_backup | — | — |
| oracle | secure_backup | — | — |
| oracle | secure_backup | — | — |
| oracle | secure_backup | — | — |
| oracle_corporation | oracle_secure_backup | — | — |
| oracle_corporation | oracle_secure_backup | — | — |
| oracle_corporation | oracle_secure_backup | — | — |
| oracle_corporation | oracle_secure_backup | — | — |
| oracle_corporation | oracle_secure_backup | — | — |
| oracle_corporation | oracle_secure_backup | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_oracle6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Oracle
Oracle Oracle Secure Backup Risk Matrix: General — CVE-2025-21578
vendor_oracle·2025-04-15·CVSS 6.7
CVE-2025-21578 [MEDIUM] Oracle Oracle Secure Backup Risk Matrix: General — CVE-2025-21578
Oracle Oracle Secure Backup Risk Matrix: General vulnerability
CVE: CVE-2025-21578
CVSS: 6.7
Protocol: None
Remote exploit: No
Affected versions: Local
Advisory: cpuapr2025 (APR 2025)
GHSA
GHSA-xx97-cmjp-pm7g: Vulnerability in Oracle Secure Backup (component: General)
ghsa_unreviewed·2025-04-15
CVE-2025-21578 [MEDIUM] CWE-732 GHSA-xx97-cmjp-pm7g: Vulnerability in Oracle Secure Backup (component: General)
Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-04-15
Published