CVE-2025-30736

Severity
7.4HIGH
EPSS
0.4%
top 38.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 15

Description

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data as well as unauthorized access to critical data or complete acce

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.2 | Impact: 5.2

Affected Packages2 packages

CVEListV5oracle_corporation/oracle_database_server19.319.26+2
NVDoracle/java_virtual_machine19.319.26+2

Patches

🔴Vulnerability Details

2
GHSA
GHSA-gg64-46cm-rj5f: Vulnerability in the Java VM component of Oracle Database Server2025-04-15
CVEList
CVE-2025-30736: Vulnerability in the Java VM component of Oracle Database Server2025-04-15

📋Vendor Advisories

1
Oracle
Oracle Oracle Database Server Risk Matrix: Java VM — CVE-2025-307362025-04-15
CVE-2025-30736 (HIGH CVSS 7.4) | Vulnerability in the Java VM compon | cvebase.io