Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuapr2025.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Apr 2025, 21:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.oracle.com/security-alerts/cpuapr2025.html - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:* |
|
| First Time |
Oracle
Oracle secure Backup |
16 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
15 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-15 21:15
Updated : 2025-04-17 21:37
NVD link : CVE-2025-21578
Mitre link : CVE-2025-21578
JSON object : View
Products Affected
oracle
- secure_backup
CWE
No CWE.