7.2

CVE-2025-62290

EPSS 0.11%
Veröffentlicht 21.10.2025 20:20:54
Zuletzt bearbeitet 23.10.2025 16:03:05
Quelle secalert_us@oracle.com
CVE-Watchlists
Login
Unerledigt
Login

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage).   The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit.  Successful attacks of this vulnerability can result in takeover of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Zfs Storage Appliance Kit Version8.8

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.291

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
secalert_us@oracle.com	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.oracle.com/security-alerts/cpuoct2025.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-62290

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-62290

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-62290

EUVD