cbcvebase.
CVE-2025-62481
published 2025-10-21

CVE-2025-62481: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are…

PriorityP193critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
ITWVulnCheck KEVRansomware
Exploited in the wild
EPSS
0.60%
44.6th percentile
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected

2 ranges
VendorProductVersion rangeFixed in
oraclemarketing12.2.3 – 12.2.14—
oracle_corporationoracle_marketing12.2.3 – 12.2.14—

Detection & IOCsextracted from sources · hover to see the quote

  • →CVE-2025-62481 affects Oracle E-Business Suite Marketing Administration component; unauthenticated remote attackers can exploit via HTTP — monitor for anomalous unauthenticated HTTP requests targeting Oracle Marketing Administration endpoints on EBS versions 12.2.3 through 12.2.14 ↗
  • →Successful exploitation results in full takeover (C/I/A all HIGH, CVSS 9.8) — treat any unexpected privilege escalation or unauthorized access within Oracle Marketing Administration as a high-priority indicator of compromise ↗
  • ·Affected versions are Oracle E-Business Suite 12.2.3 through 12.2.14 only; verify your EBS version before applying detections or patches ↗
  • ·No authentication or user interaction is required for exploitation (PR:N/UI:N), meaning perimeter controls alone are insufficient — network-level access to the HTTP service is the only prerequisite ↗
  • ·Patch guidance is tied to the Oracle October 2025 CPU (cpuoct2025); ensure the correct quarterly patch bundle is applied ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL
vendor_oracle9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.