CVE-2025-53072

Published Oct 21, 2025

Last updated a day ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-53072 is a vulnerability in the Oracle Marketing product within the Oracle E-Business Suite, specifically affecting the Marketing Administration component. The vulnerability impacts supported versions 12.2.3 through 12.2.14. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Marketing system. Successful exploitation can lead to a complete takeover of Oracle Marketing, potentially resulting in theft of sensitive customer data, unauthorized alteration of marketing campaigns, or complete disruption of operations. Applying the latest security patches is strongly recommended to mitigate this vulnerability.

Description: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Source: secalert_us@oracle.com
NVD status: Analyzed
Products: marketing

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-306

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4EDDFC92-2982-411E-8A5F-AB0BD6E293E1",
            "versionEndIncluding": "12.2.14",
            "versionStartIncluding": "12.2.3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.