CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-30727

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in takeover of Oracle Scripting. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.8%

CVSS Severity

CVSS v3 Score 9.8

References

https://www.oracle.com/security-alerts/cpuapr2025.html

Products affected by CVE-2025-30727

Oracle » E-Business Suite » Version: 12.2.10

cpe:2.3:a:oracle:e-business_suite:12.2.10
Oracle » E-Business Suite » Version: 12.2.11

cpe:2.3:a:oracle:e-business_suite:12.2.11
Oracle » E-Business Suite » Version: 12.2.12

cpe:2.3:a:oracle:e-business_suite:12.2.12
Oracle » E-Business Suite » Version: 12.2.13

cpe:2.3:a:oracle:e-business_suite:12.2.13
Oracle » E-Business Suite » Version: 12.2.3

cpe:2.3:a:oracle:e-business_suite:12.2.3
Oracle » E-Business Suite » Version: 12.2.4

cpe:2.3:a:oracle:e-business_suite:12.2.4
Oracle » E-Business Suite » Version: 12.2.5

cpe:2.3:a:oracle:e-business_suite:12.2.5
Oracle » E-Business Suite » Version: 12.2.6

cpe:2.3:a:oracle:e-business_suite:12.2.6
Oracle » E-Business Suite » Version: 12.2.7

cpe:2.3:a:oracle:e-business_suite:12.2.7
Oracle » E-Business Suite » Version: 12.2.8

cpe:2.3:a:oracle:e-business_suite:12.2.8
Oracle » E-Business Suite » Version: 12.2.9

cpe:2.3:a:oracle:e-business_suite:12.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-30727

Products

Pricing

Contact Us