CVE-2025-53046

CWE-400 — Uncontrolled Resource Consumption5 documents5 sources
Severity
4.9MEDIUM
EPSS
0.0%
top 85.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle ZFS Storage Appliance KITOracle ZFS Storage Appliance KIT
Timeline
PublishedOct 21

Description

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Analytics). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 4.9 (Availab…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
CVE-2025-53046: Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Analytics)↗2025-10-21
▶
GHSA
GHSA-374p-c2qx-7686: Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Analytics)↗2025-10-21
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle Systems Risk Matrix: Analytics — CVE-2025-53046↗2025-10-15
▶
Microsoft
arm64: dts: imx8ulp: correct the flexspi compatible string↗2024-11-12
▶