CVE-2025-53049

CWE-284 — Improper Access Control4 documents4 sources
Severity
8.4HIGH
EPSS
0.1%
top 77.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle Business Intelligence Enterprise EditionOracle Business Intelligence
Timeline
PublishedOct 21

Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Inte…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:HExploitability: 1.7 | Impact: 6.0

Affected Packages2 packages

▶NVDoracle/business_intelligence7.6.0.0.0, 8.2.0.0.0+1

🔴Vulnerability Details

2
CVEList
CVE-2025-53049: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration)↗2025-10-21
▶
GHSA
GHSA-mh5q-j594-mf39: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration)↗2025-10-21
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Analytics Risk Matrix: Analytics Web Administration — CVE-2025-53049↗2025-10-15
▶