CVE-2025-62288

CWE-2674 documents4 sources
Severity
4.9MEDIUM
EPSS
0.0%
top 87.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle Health Sciences Data Management WorkbenchOracle Health Sciences Data Management Workbench
Timeline
PublishedOct 21

Description

Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Logger). Supported versions that are affected are 3.4.0.1.3 and 3.4.1.0.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Scien…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-4grr-7h27-h23q: Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Logger)↗2025-10-21
▶
CVEList
CVE-2025-62288: Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Logger)↗2025-10-21
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: Logger — CVE-2025-62288↗2025-10-15
▶
CVE-2025-62288 (MEDIUM CVSS 4.9) | Vulnerability in the Oracle Health | cvebase.io