CVE-2025-21578

Summary

CVE-2025-21578 is a vulnerability affecting Oracle Secure Backup versions 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1, and 18.1.0.2. This easily exploitable issue enables high-privileged attackers to gain unauthorized control over Oracle Secure Backup when logged into the associated infrastructure. Successful exploitation can lead to significant confidentiality, integrity, and availability impacts, resulting in a takeover of Oracle Secure Backup. The Base Score of this vulnerability, according to the CVSS 3.1 vector, is 6.7. (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.