Critical Vulnerabilities in Oracle E-Business Suite Marketing Administration
ID: 30cc57ee-d928-5b72-a306-4f3e13a58514
STIX ID: report--30cc57ee-d928-5b72-a306-4f3e13a58514
Feed Name: Kudelski Security
Threat Score
Oracle disclosed two critical vulnerabilities (CVE-2025-53072 and CVE-2025-62481) in the Marketing Administration component of Oracle E-Business Suite (versions 12.2.3–12.2.14). Both allow unauthenticated remote attackers to fully compromise the Oracle Marketing module via a single HTTP request (CVSS 9.8), with recommendations to apply the October 2025 Critical Patch Update, isolate the component from public networks, deploy WAFs, and tighten monitoring and access controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.