CVE-2025-30751HIGH 8.8EPSS p24.6%

CVE-2025-30751CVE-2025-30751

Description

Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Oracle Database. Successful attacks of this vulnerability can result in takeover of Oracle Database. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.33% probability of exploitation · percentile 24.6% · 2026-06-19T12:03:05Z
Published2025-07-15
Last modified2025-07-29

Underlying weaknesses· 1

CWE-863

References

  1. https://www.oracle.com/security-alerts/cpujul2025.html

1

TypeTargetConfidenceTier
WeaknessIncorrect Authorizationcwe-8630%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-30743
CVE
CVE-2025-61751
CVE
CVE-2025-30727
CVE
CVE-2025-53037
CVE
CVE-2026-46775
CVE
CVE-2025-53036
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.