CVE-2025-30727 - CVE House
Back to Database
Status published Critical CVE-2025-30727

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite...

Vulnerability Description

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in takeover of Oracle Scripting. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-30727

Credits & Attribution

No credits recorded in the NVD database.

References

More from Oracle Corporation

View All →
CVE-2025-62641
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization...
High 8.2
CVE-2025-62592
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization...
Medium 6
CVE-2025-62591
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization...
Medium 6
CVE-2025-62590
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization...
High 8.2
CVE-2025-62589
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization...
High 8.2

Affected Vendor

Oracle Corporation

View all reports →

Affected Software

Oracle Scripting
Vulnerable Versions:
12.2.3

Timeline

Official Publish: April 15th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.