CVE-2025-21506

Summary

CVE-2025-21506 is a vulnerability affecting Oracle Project Foundation in Oracle E-Business Suite (Technology Foundation component). Affected versions include 12.2.3 to 12.2.13. This issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Project Foundation. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data or access to all Oracle Project Foundation data. The confidentiality and integrity of critical data are at risk, with a CVSS 3.1 Base Score of 8.1. Attacks require low attack complexity and can be carried out with network access, making this a potentially serious concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.