CVE-2025-30707
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 15, 2025
Updated: Apr 21, 2025
CWE ID 284
Summary
CVE-2025-30707 is a vulnerability affecting the Oracle iStore component of Oracle E-Business Suite, specifically versions 12.2.3 to 12.2.14. This issue is classified as easily exploitable and allows unauthenticated attackers, through network access via HTTP, to compromise Oracle iStore. A successful exploit can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data, with significant confidentiality impacts. The CVSS Base Score is 7.5.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Oracle iStore
Affected Vendors
- Oracle